面向行为的内网空间安全态势建模与分析

doi:10.11959/j.issn.2096-109x.2016.00067

Abstract

Abstract:

According to the situation awareness theory as well as the characteristics of the inside network security,a PMDV model for behavior-oriented inside network security situation modeling by dividing the inside network space into physical domain,information domain and social domain was proposed.A sound base for situation modeling of inside network security,which classified the entities inside the network space into the following 4 classes:person(P),machine(M),data(D) and virtual agent(V),was provided and the core element “behavior” in situation model with the interactions between different PMDV entities was defined.The structure and implementation guideline of the situation analysis platform based on PMDV model were also presented and studied.

Key words: cyberspace, inside network, security, situational awareness, behavior

CLC Number:

TP393

Cheng ZHU,Jia-jia MIAO,Han-dong MAO. Behavior-oriented inside network security situation modeling and analysis[J]. Chinese Journal of Network and Information Security, 2016, 2(8): 17-22.

Figures/Tables 5

References 22

[1]	IBM security.IBM 2015 cyber security intelligence index[R]. IBM, 2015.
[2]	CARDENAS A A , MANADHATA P K , RAJAN S . Big data analytics for security[J]. IEEE Security＆Privacy, 2013, (11/12): 74-76.
[3]	RORY W , BETSY B , PARK Y , et al BeyondCorp:a new approach to enterprise security[J].Login, 2014, 39(6): 6-11.
[4]	JAY J . Data driven security:analysis,visualization and dashboards[M]. Indianapolis:John Wiley and Sons, 2014.
[5]	Splunk Inc. Using splunk user behavior analytics[R]. Splunk, 2015.
[6]	启明星辰 . 基于大数据分析的安全管理平台技术研究及应用[EB/OL]. . 2014.
	Venustech . Study and application of information security manage-ment platform based on big data[EB/OL]. . 2014.
[7]	瀚思 . 数据驱动安全[EB/OL]. . 2015.
	Hansight . Data driven security[EB/OL]. . 2015.
[8]	张焕国，韩文报，来学嘉，等. 网络空间安全综述[J]. 中国科学， 2016, 46(2): 125-164.
	ZHANG H G , HAN W B , LAI X J . Survey on cyberspace secu-rity[J]. Science China, 2016, 46(2): 125-164
[9]	ENDSLEY M R . Toward a theory of situation awareness in dy-namic systems[J]. Human Factors, 1995, 37(1): 32-64.
[10]	尤马彦 . 网络安全态势评估技术的研究与实现[D], 广东工业大学, 2012.
	YOU M Y . Research and implementation of network security situa-tion assessment technology[D]. Guangzhou:Guangdong University of Technology, 2012.
[11]	王志平 . 基于指标的网络安全态势评估研究[D]. 国防科学技术大学, 2010.
	WANG Z P . Network security situation assessment research based on the index[D]. Changsha:National University of Defense Tech-nology, 2010.
[12]	杨光, 马建刚, 于爱民 , 等. 内部威胁检测研究[J], 信息安全学报, 2016, 1(3): 21-36.
	YNAG G , MA J G , YU A M , et al. The internal threat detection study[J]. Journal of Information Security, 2016, 1(3): 21-36.
[13]	NURSE J R C , BUCKLEY O , LEGG P A , et al. Under-standing insider threat:a framework for characterising attacks[C]// IEEE Symposium on Workshop on Research for Insider Threat, IEEE Computer Society Security＆Privacy. c2014: 215-228.
[14]	AZARIA A , RICHARDSON A , KRAUS S , et al. Behavioral analy-sis of insider threat:a survey and boot-strapped prediction in im-balanced data[J]. IEEE Transactions on Computational Social Sys-tems, 2014, 1(2): 135-155.
[15]	JAKOBSON G , BUFORD J , LEWIS L . A framework of cognitive situation modeling and recognition[C]// 2006 IEEE Military Com-munications Conference. c2006: 1-7.
[16]	Elastic search site[EB/OL]. .
[17]	Kafka site[EB/OL]. .
[18]	CATTELL R . Scalable SQL and NoSQL data stores[J]. Sigmod Rec, 2011, 39(4): 12-27.
[19]	HDF site[EB/OL]. .
[20]	HIVE site[EB/OL]. .
[21]	Spark site[EB/OL]. .
[22]	ZAHARIA M , CHOWDHURY M , DAS T , et al. Resilient distrib-uted datasets:a fault-tolerant abstraction for in-memory cluster computing[C]// The 9th USENIX Conference on Networked Sys-tems Design and Implementation. c2012.

Metrics

Recommended 0

No Suggested Reading articles found!

Behavior-oriented inside network security situation modeling and analysis

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 5

References 22

Related Articles 15

Metrics

Recommended 0

[1]	Renfeng CHEN, Hongbin ZHU. Research on credit card transaction security supervision based on PU learning [J]. Chinese Journal of Network and Information Security, 2023, 9(3): 73-78.
[2]	Jingyi YUAN, Zichuan LI, Guojun PENG. EN-Bypass: a security assessment method on e-mail user interface notification [J]. Chinese Journal of Network and Information Security, 2023, 9(3): 90-101.
[3]	Genlin XIE, Guozhen CHENG, Yawen WANG, Qingfeng WANG. Software diversity evaluating method based on gadget feature analysis [J]. Chinese Journal of Network and Information Security, 2023, 9(3): 161-173.
[4]	Peng HOU, Zhixin LI, Fei ZHANG, Xu SUN, Dan CHEN, Yihao CUI, Hanbing ZHANG, Yinan JIN, Hongfeng CHAI. Technology and practice of intelligent governance for financial data security [J]. Chinese Journal of Network and Information Security, 2023, 9(3): 174-187.
[5]	Jinyin CHEN, Rongchang LI, Guohan HUANG, Tao LIU, Haibin ZHENG, Yao CHENG. Survey on vertical federated learning: algorithm, privacy and security [J]. Chinese Journal of Network and Information Security, 2023, 9(2): 1-20.
[6]	Heli WANG, Qiao YAN. Selfish mining detection scheme based on the characters of transactions [J]. Chinese Journal of Network and Information Security, 2023, 9(2): 104-114.
[7]	Xiaochen SHEN, Yinhui GE, Bo CHEN, Ling YU. Research on construction technology of artificial intelligence security knowledge graph [J]. Chinese Journal of Network and Information Security, 2023, 9(2): 164-174.
[8]	Beiyuan YU, Shanyao REN, Jianwei LIU. Overview of blockchain assets theft attacks and defense technology [J]. Chinese Journal of Network and Information Security, 2023, 9(1): 1-17.
[9]	Xunxun CHEN, Mingzhe LI, Ning LYU, Liang HUANG. Intrinsic assurance: a systematic approach towards extensible cybersecurity [J]. Chinese Journal of Network and Information Security, 2023, 9(1): 92-102.
[10]	Xin SHI, Yunfei GUO, Yawen WANG, Xiaoli SUN, Hao LIANG. Physical-social attributes integrated Sybil detection for Tor bridge distribution [J]. Chinese Journal of Network and Information Security, 2023, 9(1): 103-114.
[11]	Kexian LIU, Jianfeng GUAN, Wancheng ZHANG, Zhikai HE, Dijia YAN. Multiple redundant flow fingerprint model based on time slots [J]. Chinese Journal of Network and Information Security, 2023, 9(1): 115-129.
[12]	Ganqin LIU, Hui LI, Hui ZHU, Yukun HUANG, Xingdong LIU. Public key cryptographic algorithm SM2 optimized implementation on low power embedded platform [J]. Chinese Journal of Network and Information Security, 2022, 8(6): 29-38.
[13]	Xue BAI, Baodong QIN, Rui GUO, Dong ZHENG. Two-party cooperative blind signature based on SM2 [J]. Chinese Journal of Network and Information Security, 2022, 8(6): 39-51.
[14]	Jun LIU, Lin YUAN, Zhishang FENG. Survey of key management schemes for cluster networks [J]. Chinese Journal of Network and Information Security, 2022, 8(6): 52-69.
[15]	Dong LI, Yanni HAO, Shenghui PENG, Ruijie ZI, Ximeng LIU. Network security of the National Natural Science Foundation of China: today and prospects [J]. Chinese Journal of Network and Information Security, 2022, 8(6): 92-101.