Network security situation: From awareness to awareness-control. (1st August 2019)

• Record Type: Journal Article
• Authors: Liu, Xiaowu; Yu, Jiguo; Lv, Weifeng; Yu, Dongxiao; Wang, Yinglong; Wu, Yu
• Is Part Of: Journal of network and computer applications. Volume 139(2019)
• Page Start: 15
• Page End: 30
• Publication Date: 2019-08-01
• Subjects: Network security situation awareness -- Cognitive computing -- Multi-source fusion -- Threat gene -- Reinforced learning -- Cognitive control; Microcomputers -- Periodicals; Computer networks -- Periodicals; Application software -- Periodicals; Micro-ordinateurs -- Périodiques; Réseaux d'ordinateurs -- Périodiques; Logiciels d'application -- Périodiques; Application software; Computer networks; Microcomputers; Periodicals; 004.05; 004
• DOI: 10.1016/j.jnca.2019.04.022
• Languages: English
• ISSNs: 1084-8045

Abstract

Abstract: Network Security Situation Awareness (NSSA) is a security theory which can perceive the network threat from a global perspective. In this paper, we present a Cognitive Awareness-Control Model (CACM) for NSSA. CACM adopts the cross-layer architecture and cognitive circle which can break through the interactive barrier between different network layers. Firstly, we propose a decision-level fusion method in which different weights are assigned for different data sources so that the fusion accuracy can be improved. Secondly, a hierarchical quantification approach is discussed which can avoid inferring the complex memberships among network components. Finally, a cognitive regulation mechanism is analysed in order to solve the issue of automatic control. The simulation experiments show that our model can perceive and regulate the threat situation effectively. To the best of our knowledge, this is the first discussion which utilizes cognitive awareness-control to solve the regulation problem of NSSA.