Hierarchical network threat situation assessment method for DDoS based on D-S evidence theory

Liu, Zihao; Zhang, Bin; Zhu, Nianyong; Li, Lixun

doi:10.1109/isi.2017.8004873

Cited by 13 publications

(6 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Wang [3] designed a hierarchical network security situation assessment method based on Analytic Hierarchy Process (AHP), using the Cyber threads Situation Assessment (CSA) index system constructed by AHP to determine the weight value of network threats. Liu [4] used D-S evidence theory to fuse the measured indicators to obtain device threat values. Then, they used AHP to calculate the weights of different devices, and finally obtained the network threat situation value through the weighted method.…”

Section: Related Workmentioning

confidence: 99%

Research on security classification for proximity networks with radio access network

Chen,

Bai,

Gao

2024

Fourth International Conference on Mechanical, Electronics, and Electrical and Automation Control (METMS 2024)

View full text Add to dashboard Cite

Section: Related Workmentioning

confidence: 99%

Research on security classification for proximity networks with radio access network

Chen,

Bai,

Gao

2024

Fourth International Conference on Mechanical, Electronics, and Electrical and Automation Control (METMS 2024)

View full text Add to dashboard Cite

“…The approach makes threat analysis easier and enables effective examination of potential threats in the network system. Zihao et al (2017) computes metrics representing network conditions at each layer and then fuses these metrics with D-S evidence theory to estimate influence. A hidden Markov model extension was used to assess the cyber security situation by Liao et al (2020) .…”

Section: Related Workmentioning

confidence: 99%

A novel network security situation assessment model based on multiple strategies whale optimization algorithm and bidirectional GRU

Zhang,

Fu,

et al. 2023

PeerJ Computer Science

View full text Add to dashboard Cite

The rapid development of the internet has brought about a comprehensive transformation in human life. However, the challenges of cybersecurity are becoming increasingly severe, necessitating the implementation of effective security mechanisms. Cybersecurity situational awareness can effectively assess the network status, facilitating the formulation of better cybersecurity defense strategies. However, due to the low accuracy of existing situational assessment methods, situational assessment remains a challenge. In this study, a new situational assessment method, MSWOA-BiGRU, combining optimization algorithms and temporal neural networks, was proposed. Firstly, a scientific indicator system proposed in this research is used to calculate the values of each indicator. Then, the Analytic Hierarchy Process is used to derive the actual situation values, which serve as labels. Taking into account the temporal nature of network traffic, the BiGRU model is utilized for cybersecurity situational assessment. After integrating time-related features and network traffic characteristics, the situational assessment value is obtained. During the evaluation process, a whale optimization algorithm (MSWOA) improved with a mix of strategies proposed in this study was employed to optimize the model. The performance of the proposed MSWOA-BiGRU model was evaluated on publicly available real network security datasets. Experimental results indicate that compared to traditional optimization algorithms, the optimization performance of MSWOA has seen significant enhancement. Furthermore, MSWOA-BiGRU demonstrates superior performance in cybersecurity situational assessment compared to existing evaluation methods.

show abstract

“… is the residual variance between fitting result and actual value. AIC criterion is defined, formula (5)(6).…”

Section: Arima Modeling Stepsmentioning

confidence: 99%

“…Previous work, such as Game theory [4], D-S evidence theory [5] and artificial immunity [6] have proposed to percept the security situation of IT systems by assessing the impact on system status under attacks. The assessment methods have been quite mature, providing strong theoretical support for the situation assessment in security.…”

Section: Introductionmentioning

confidence: 99%

A Combined Prediction Method of Industrial Internet Security Situation Based on Time Series

Shang

2019

Proceedings of the 2019 9th International Conference on Communication and Network Security

View full text Add to dashboard Cite

Attacks on industrial control systems have different types and various intensities. Predicting the development trend of security state for updating defense strategy in time is important. Every single prediction model has its different emphases, and the accuracy of single prediction model may be reduced when the system is attacked. Combined prediction model integrates the prediction results of multiple single prediction models to improve the overall prediction accuracy. The weight of the combined model is determined by the mean square error of every single model. It is taken a logarithmic function of the mean square error of each single model to enlarge the difference between the superior and inferior models. Then, the simple weight function is taken to determine the weight of each model based on the logarithm result of each model.This approach makes greater use of accurate model information. Through the comparative analysis of the model, the error of the combined prediction method is obviously reduced. Through the comparison and analysis of the weighted method, the error of the weighted method of the combined prediction model proposed in this paper is the minimum. The combined prediction method can provide more accurate defense opinions for network security administrators.

show abstract

Hierarchical network threat situation assessment method for DDoS based on D-S evidence theory

Cited by 13 publications

References 4 publications

Research on security classification for proximity networks with radio access network

Research on security classification for proximity networks with radio access network

A novel network security situation assessment model based on multiple strategies whale optimization algorithm and bidirectional GRU

A Combined Prediction Method of Industrial Internet Security Situation Based on Time Series

Contact Info

Product

Resources

About