关键词: 危险理论, 网络攻击, 态势评估

Abstract: This paper proposes a novel Cyber Attack Situation Assessment method（CTDA） inspired by danger theory. Each host-based sensor takes charge of cyberspace threats detection, which is realized by artificial immune lymphocytes. The artificial immune response is triggered by the danger signal, which is caused by the unnaturally dying or distressed lymphocytes. Through receiving and dealing with danger signal, the cyberspace threat situation is evaluated by the assessment centre. Theoretical analysis and simulation results show that the presented method is feasible；it has overcome the deficiencies of the self and non-self based cyberspace situational awareness techniques, such as too huge self universe, too long time of immune tolerance, and etc. Therefore, it provides a novel solution to test and evalution of computer networking and information systems.

Key words: danger theory, cyber attack, situation assessment