Table of Content

Open Access iconOpen Access

ARTICLE

Network Security Situation Awareness Framework based on Threat Intelligence

Hongbin Zhang1, 2, Yuzi Yi1, *, Junshe Wang1, Ning Cao3, *, Qiang Duan4

School of Information Science and Engineering, Hebei University of Science and Technology, Shijiazhuang, 050000, China.
Hebei Key Laboratory of Network and Information Security, Hebei Normal University, Shijiazhuang, 050024, China.
College of Information Engineering, Qingdao Binhai University, Qingdao, 266000, China.
Department of Information Science & Technology, Pennsylvania State University, 1600 Woodland Rd. Abington, Pa, 19001, USA.

* Corresponding Author: Yuzi Yi. Email: email;
  Ning Cao. Email: email.

Computers, Materials & Continua 2018, 56(3), 381-399. https://doi.org/10.3970/cmc.2018.03787

Abstract

Network security situation awareness is an important foundation for network security management, which presents the target system security status by analyzing existing or potential cyber threats in the target system. In network offense and defense, the network security state of the target system will be affected by both offensive and defensive strategies. According to this feature, this paper proposes a network security situation awareness method using stochastic game in cloud computing environment, uses the utility of both sides of the game to quantify the network security situation value. This method analyzes the nodes based on the network security state of the target virtual machine and uses the virtual machine introspection mechanism to obtain the impact of network attacks on the target virtual machine, then dynamically evaluates the network security situation of the cloud environment based on the game process of both attack and defense. In attack prediction, cyber threat intelligence is used as an important basis for potential threat analysis. Cyber threat intelligence that is applicable to the current security state is screened through the system hierarchy fuzzy optimization method, and the potential threat of the target system is analyzed using the cyber threat intelligence obtained through screening. If there is no applicable cyber threat intelligence, using the Nash equilibrium to make predictions for the attack behavior. The experimental results show that the network security situation awareness method proposed in this paper can accurately reflect the changes in the network security situation and make predictions on the attack behavior.

Keywords


Cite This Article

APA Style
Zhang, H., Yi, Y., Wang, J., Cao, N., Duan, Q. (2018). Network security situation awareness framework based on threat intelligence. Computers, Materials & Continua, 56(3), 381-399. https://doi.org/10.3970/cmc.2018.03787
Vancouver Style
Zhang H, Yi Y, Wang J, Cao N, Duan Q. Network security situation awareness framework based on threat intelligence. Comput Mater Contin. 2018;56(3):381-399 https://doi.org/10.3970/cmc.2018.03787
IEEE Style
H. Zhang, Y. Yi, J. Wang, N. Cao, and Q. Duan, “Network Security Situation Awareness Framework based on Threat Intelligence,” Comput. Mater. Contin., vol. 56, no. 3, pp. 381-399, 2018. https://doi.org/10.3970/cmc.2018.03787



cc Copyright © 2018 The Author(s). Published by Tech Science Press.
This work is licensed under a Creative Commons Attribution 4.0 International License , which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.
  • 3832

    View

  • 1635

    Download

  • 0

    Like

Share Link