Abstract:

The rapid development of the Internet leads to an increase in system complexity. Traditional network management can not meet the requirements, and it should evolve to fusionbased Cyberspace Situational Awareness (CSA).As the core of CSA, Network Situation Assessment (NSA) can integrate unit network managements, give a comprehensive macroscopic view of network operation status, and provide decision support. This paper focuses on the characteristics and requirements of network situation and introduces a rough set theory which has the superiority in machine learning, dealing with massive redundancy information, feature selection, and so on. We propose a NSA model based on rough set analysis, gave a formal definition and discuss the assessment procedure in detail, which includes decision table establishment, data preprocessing, situation factor selection, consistency judgment, condition attribute reduction and decision rule reduction. The experiment results demonstrate the efficiency and effectiveness of the prototype system.

Key words: network situation assessment;data fusion;rough set analysis;model