关键词: 态势评估, 交叉确认, 模糊论域, 模糊推理

Abstract: According to the fact that the data sources of the network security situation assessment are one-sided and the results are not accurate and other issues，this paper proposes a method of network security situation assessment based on cross-validation.On the basis of the correlation of network security events and the uncertainty of alarm information，a kind of cross-validation mechanism on multi-source warnings is presented.Thus，a large amount of data from multi-source warnings are identified and confirmed by the mechanism with fuzzy reasoning，and then the situation assessment is implemented on the basis of the extract accurate and tidy attack information with combining static assessment data.An example of actual network is given to validate the method.The results show that this method is more effective and accurate than the existing methods.

Key words: situation assessment, cross-validation, fuzzy domain, fuzzy reasoning