• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

J4 ›› 2007, Vol. 29 ›› Issue (5): 11-14.

• 论文 • 上一篇    下一篇

基于SVM的网络威胁频率预测算法研究

刘春芬[1,2] 宣蕾[2] 王正华[2] 李旭峰[2]   

  • 出版日期:2007-05-01 发布日期:2010-06-02

  • Online:2007-05-01 Published:2010-06-02

摘要:

网络安全风险评估分为定量评估与定性评估两种方法。现今的评估方法多数仅对网络安全事件进行定性的评估,不能给出网络安全风险值的定量说明,评估结果缺乏客观性、动态性和可信性。本文在深入研究风险评估理论和实验的基础上提出了一种新的网络安全定量风险评估方法——基于支持向量机SVM的网络威胁频率预测方法,构造了相应的S SVM模型,并采用仿真数据对模型进行了验证。该模型对来自某局域网IDS实测数据的网络威胁频率进行了预测,和真实值的对比说明,所提出的网络威胁预测算法是行之有效效的。

关键词: 风险评估 威胁频率 支持向量机 时间序列 核函数

Abstract:

There are two types of risk assessment methods: the quantitative and qualitative ones. Most risk assessment methods only give a qualitative account o f the network threat events without the quantitative value, and the evaluation resuits lack objectivity, dynamics and credibility. This paper presents a new quantitative assessment method, which is a predicting algorithm for network threat frequency based on SVM. A model of support vector regression machine is constructed, and the performance of the model is valida:ed based on simulation data. The SVM model predicts the threat frequency using a LAN's s detected data by IDS, compared with the detected data, the result shows that our method is feasible.

Key words: (;risk assessment, threat frequency, support vector machine-time sequence;kernel function)