基于SAA-SSA-BPNN的网络安全态势评估模型

doi:10.3778/j.issn.1002-8331.2110-0391

摘要/Abstract

摘要： 针对目前网络安全态势评估模型准确性和收敛性有待提高的问题，提出一种基于SAA-SSA-BPNN的网络安全态势评估模型。该模型利用模拟退火算法（SAA）可以一定概率接受劣解并有大概率跳出局部极值达到全局最优解的特性来优化麻雀搜索算法，利用优化后的麻雀搜索算法（SSA）具有良好稳定性和收敛速度快且不易陷入局部最优的特点对BP神经网络（BPNN）进行改进，找到最佳适应度个体并获取最优权值和阈值，将其作为初始值赋给BP神经网络，将预处理后的指标数据输入改进后的BP神经网络模型对其进行训练，利用训练好的模型对网络系统所遭受威胁的程度进行评估。对比实验结果表明，该评估模型比其他基于改进BP神经网络的态势评估模型准确性更高，收敛速度更快。

关键词: 网络安全, 态势评估, BP神经网络, 模拟退火算法, 麻雀搜索算法

Abstract: To solve the problems that the accuracy and convergence of current network security situation assessment models need to be improved, a network security situation assessment model based on SAA-SSA-BPNN is proposed. In this model, the sparrow search algorithm（SSA） is optimized by the simulated annealing algorithm（SAA） that can accept the inferior solution with a certain probability and jump out of the local extreme value with a high probability to reach the global optimal solution, and the BP neural network（BPNN） is improved by the optimized sparrow search algorithm that has good stability, fast convergence speed and is not easy to fall into the local optimum, so as to find the best fitness individual, and obtain the optimal weight and threshold, then assign them to the BP neural network as the initial values. The preprocessed index data is input into the improved BP neural network model for training, and finally the threat degree of the network system is assessed based on the trained model. Comparative experimental results show that this assessment model has higher accuracy and faster convergence than other situation assessment models based on improved BP neural network.

Key words: network security, situation assessment, back propagation（BP） neural network, simulated annealing algorithm, sparrow search algorithm

张然, 潘芷涵, 尹毅峰, 蔡增玉. 基于SAA-SSA-BPNN的网络安全态势评估模型[J]. 计算机工程与应用, 2022, 58(11): 117-124.

ZHANG Ran, PAN Zhihan, YIN Yifeng, CAI Zengyu. Network Security Situation Assessment Model Based on SAA-SSA-BPNN[J]. Computer Engineering and Applications, 2022, 58(11): 117-124.

参考文献

[1] BASS T.Multisensor data fusion for next generation distributed intrusion detection system[C]//Proceedings of 1999 IRIS National Symposium on Senor and Data Fusion.America：The Johns Hopkins University，1999：1-6.
[2] WANG Q，BU S，HE Z，et al.Toward the prediction level of situation awareness for electric power systems using CNN-LSTM network[J].IEEE Transactions on Industrial Informatics，2020，17（10）：6951-6961.
[3] WU J，OTA K，DONG M，et al.Big data analysis-based security situational awareness for smart grid[J].IEEE Transactions on Big Data，2016：408-417.
[4] TAO X L，KONG K C，ZHAO F，et al.An efficient method for network security situation assessment[J].International Journal of Distributed Sensor Networks，2020，16（11）：1173065.
[5] WANG H B，ZHAO D M，LI X X.Research on network security situation assessment and forecasting technology[J].Journal of Web Engineering，2020，19（7/8）.
[6] 常利伟，田晓雄，张宇青，等.基于多源异构数据融合的网络安全态势评估体系[J].智能系统学报，2021，16（1）：38-47.
CHANG L W，TIAN X X，ZHANG Y Q，et al.Network security situation assessment architecture based on multi-source heterogeneous data fusion[J].CAAI Transactions on Intelligent Systems，2021，16（1）：38-47.
[7] 冯学伟，王东霞，马国庆，等.网络安全态势感知中态势评估关键技术研究[J].计算机工程与应用，2011，47（19）：88-92.
FENG X W，WANG D X，MA G Q，et al.Research on key technology of situation assessment in network situation awareness[J].Computer Engineering and Applications，2011，47（19）：88-92.
[8] SMITH S E.Tightening the net：examining and demonstrating commonly available network security tools[D].Texas：Texas A&M University.Department of Computing and Mathematical Sciences，2012.
[9] YEGNESWARAN V，BARFORD P，PAXSON V.Using honeynets for internet situational awareness[C]//Proceedings of the 4th Workshop on Hot Topics in Networks，2005.
[10] KOTENKO I，NOVIKOVA E.Visualization of security metrics for cyber situation awareness[C]//2014 Ninth International Conference on Availability，Reliability and Security，2014：506-513.
[11] HOLSOPPLE J，SUDIT M，NUSINOV M，et al.Enhancing situation awareness via automated situation assessment[J].IEEE Communications Magazine，2010，48（3）：146-152.
[12] 王娟，张凤荔，傅翀，等.网络态势感知中的指标体系研究[J].计算机应用，2007（8）：1907-1909.
WANG J，ZHANG F L，FU C，et al.Study on index system in network situation awareness[J].Journal of Computer Applications，2007（8）：1907-1909.
[13] RUMELHART D E，HINTON G E，WILLIAMS R J.Learning representations by back-propagating errors[J].Nature，1986，323（3）：533-536.
[14] 高岭，罗昭，王伟，等.一种基于遗传算法改进的BP神经网络安全态势评估算法：CN201810228542.2[P].2021-04-13.
GAO L，LUO Z，WANG W，et al.An improved BP neural network security situation assessment algorithm based on genetic algorithm：CN201810228542.2[P].2021-04-13.
[15] 段秀娟.基于混沌粒子群优化BP神经网络的网络安全风险评估系统设[J].科学技术与工程，2019，19（16）：251-255.
DUAN X J.Design of network security risk assessment system based on chaotic particle swarm optimization BP neural network[J].Science Technology and Engineering，2019，19（16）：251-255.
[16] METROPOLIS N.Equation of state calculations by fast computing machines[J].Journal of Chemical Physics，1953，21：1087.
[17] 张波，叶家玮，胡郁葱.模拟退火算法在路径优化问题中的应用[J].中国公路学报，2004（1）：83-85.
ZHANG B，YE J W，HU Y C.Application of optimizing the path by simulated annealing[J].China Journal of Highway and Transport，2004（1）：83-85.
[18] 王乐洋，许冉冉，靳锡波，等.非线性反演算法的综合评价对比[J].武汉大学学报（信息科学版），2022，47（3）：341-351.
WANG L Y，XU R R，JIN X B，et al.Comprehensive evaluation and comparison of nonlinear inversion algorithms[J].Geomatics and Information Science of Wuhan University，2022，47（3）：341-351.
[19] 薛建凯.一种新型的群智能优化技术的研究与应用[D].上海：东华大学，2020.
XUE J K.Research and application of a new swarm intelligence optimization technology[D].Shanghai：Donghua University，2020.