网络安全态势感知主要致力于从全局角度动态反映信息网络安全环境,并对信息网络安全的发展趋势做出评估和分析。作为网络安全领域的新热点,网络安全态势感知在学术研究上取得了很多理论成果,但在系统的构建与应用方面取得的成果却不多见。文章在阐述网络安全态势感知基本概念的基础上,着重描述了网络安全态势感知系统的功能需求、体系结构和关键技术,详细剖析了脆弱点分析评估和安全态势分析评估两个典型应用。
Cyberspace security situational awareness is devoted to reflecting the dynamic cyberspace security environment from an overall point of view, and makes the evaluation and analysis of the trend of the cyberspace security. As a new hotspot in the field of cyberspace security, academic research on cyberspace security situation awareness has made numerous achievements, but the construction and application of such system is rare. In this paper, the basic concept of cyberspace security situation awareness is introducd, the functional requirements, architecture and key technologies of cyberspace security situational awareness system are described, two typical application situation analysis, i.e. vulnerability and security situational analysis & evaluation, are illustrated in detailed.