关键词: 网络安全, 安全态势, Endsley模型, Agent理论, 径向基神经网络, NSSA框架, 多模态特征, 数据融合

Abstract:

In view of the problems of single information source and low early warning quality of network security monitoring equipment, a network security situation assessment method integrating multiple data sources is proposed in this study. The NSSA framework of network security situation is constructed by introducing Endsley model and agent theory. By using the idea of radial basis function neural network, the fusion of multi-source heterogeneous data is realized through eliminating redundant noise and irrelevant signals. Therefore, a network security situation assessment method with multi-modal feature fusion is proposed. The simulation results of MATLAB software show that compared with the traditional BP and RBF neural networks, the proposed network security situation assessment method has better learning ability and generalization ability.

Key words: network security, security situation, Endsley model, Agent theory, radial basis function neural network, NSSA framework, multimodal features, data fusion