为了使网络管理由被动防御转为主动防御,需对网络安全态势进行预测。针对已有态势预测方法存在的准确性不高、需要样本训练问题,提出基于粒子滤波的网络安全态势预测方法。该方法利用带权粒子集逼近系统的后验概率密度函数,通过重要性采样、权值更新、状态估计等近似积分操作来实现非线性状态预测。实验结果表明,该方法不仅能体现网络安全状态的非线性,也预测了网络安全态势值。对比其他态势预测模型,该方法准确性更高,且适应于复杂网络环境。
In order to change the network management from passive defense to active defense,it is necessary to predict network security situation. To solve the problems of the low accuracy and samples training in existing forecast methods,the prediction method of network security situation based on particle filter is proposed. This method uses the weighted particles to approximate the posteriori probability density and realizes nonlinear situation prediction by the approximate integral operations include importance sampling,weight updating,state estimation. Experimental results show that this method can not only reflect the nonlinear of network security situation,but also forecast the value of network security situation. Comparing with the other situation forecasting models,this method is more accurate and can be adapted to the complex network environment.