Abstract:With the popularity of computers, the Internet has entered the production and all aspects of social life, but the attendant problem of network security has become the focus of widespread concern. Network security situation awareness to effectively respond to network security issues provide a viable solution: for complex network environments and malicious attacks, a comprehensive analysis of attacks against various parts of the network system, from a macro point of view of network security situation be assess and predict the future of network security situation based on this information. For the predictive accuracy of prediction system for network security situation has improved significantly, and network security situation prediction method based on machine learning for the network security situation prediction have a high degree feasible, in the real network security situation awareness applications have certain research and practical value. Introduction of Network Security Situational Awareness Network security situation is the current status and trends of the entire information from a variety of factors operating conditions of various network devices, network behavior and user behavior constituted. Network security situational awareness can acquire, understand and display the network environment of security elements. Through a series of technical means in time and space, are fully aware of network security and access and associated elements as possible in a pluralistic, and the establishment of a network based on complex behaviors modeling and simulation situational analysis and pre-side system, and then integrate and analyze vast amounts of security associated with the network-related data. Network security situation awareness is a scientific and effective network security situation assessment and use of relevant technologies to make reasonable predictions about trends over time network security, network management personnel in advance to remind the network system for network equipment, network peer node hosts and data resources to make reasonable adjustments, upgrades and backup, network environment to address the risk of possible future harm to the network system, losses may result down to an acceptable range . Extract information network security situation is carried out on the basis of situational awareness that only a comprehensive collection of data and the use of sophisticated index system, to ensure the correctness of the results of the assessment. Therefore, in the design process model or system must pay attention to select a metric system. Network security situation is a source of diverse, different collection methods, different devices collect data formats, network security situation letter from mainly contains configuration, operating status, traffic, user behavior and other information.

State Machine Based Malicious Packet Attack Detection and Security Situation Assessment

Network Security Situation Awareness for Industrial Control System under Integrity Attacks

Identification of ICS Security Risks Toward the Analysis of Packet Interaction Characteristics Using State Sequence Matching Based on SF-FSM

An Anomaly Detection and Scenario Classification Scheme Based on Fuzzy C-means Clustering

Industrial control network security situation awareness based on improved C-SVC

An Improved Support Vector Machine Attack Detection Algorithm for Industry Controls System

Hidden Markov Model-Based Attack Detection for Networked Control Systems Subject to Random Packet Dropouts

Threat Assessment for Power Industrial Control System Based on Descriptive Vulnerability Text

A cyber-physical model for SCADA system and its intrusion detection

Networked Fault Detection for Fuzzy MJSs

An LSTM Based Malicious Traffic Attack Detection in Industrial Internet

Research on Network Security Situation Awareness System Based on Machine Learning

Fishy Cyber Attack Detection in Industrial Control Systems

Analysis and Application of intelligent Power Control System Cyber Security Situation Awareness Based on Wavelet Neural Network

A Machine Learning Based Framework for Real-Time Detection and Mitigation of Sensor False Data Injection Cyber-Physical Attacks in Industrial Control Systems

The Security Assessment on Programmable Logic Controller Based on Attack Tree Model and FAHP

A New Detection Approach Against Attack/intrusion in Measurement and Control System with Fins Protocol

Finite-Time Attack Detection for Nonlinear Complex Cyber-Physical Networks under False Data Injection Attacks

False Data Injection Attack Detection, Isolation, and Identification in Industrial Control Systems Based on Machine Learning: Application in Load Frequency Control

Artificial Intelligence Security for Hydraulic Machinery System

Improve Safety and Security of Intelligent Railway Transportation System Based on Balise Using Machine Learning Algorithm and Fuzzy System