A Quantitative Network Situation Assessment Method Based on Stochastic Model

Article Preview

Abstract:

This paper describes the basic models of network security state evaluation system and concentrates on researching the situation assessment method with stochastic model. In the paper, which makes use of the Hidden Semi-Markov Model (HsMM), tries to simulate the operation of network system. The alert statistics, deriving from network defense system, is used as data sources to realize the evaluation of network security situation. HsMM modifies the HMM model concerning the hypothesis of some state-duration time in relation to exponential distribution, which coincides the description of the network systems operation in the real world. The experimental results imply that HsMM is an ideal security evaluation method.

You might also be interested in these eBooks

Info:

Periodical:

Pages:

768-771

Citation:

Online since:

February 2014

Authors:

Export:

Price:

Permissions CCC:

Permissions PLS:

Сopyright:

© 2014 Trans Tech Publications Ltd. All Rights Reserved

Share:

Citation:

* - Corresponding Author

[1] S. Hariri S, G. Z Qu, T. Dharmagadda: IEEE Security & Privacy Vol. 1(5) (2003), pp.49-54.

Google Scholar

[2] Information on http: /www. cert. org, (2013).

Google Scholar

[3] X. D Huang, Y. Ariki, M. A Jack: Hidden Markov Models for Speech Recognition ( Edinburgh University Press, 1990).

Google Scholar

[4] Kevin P. Murphy: Hidden semi-Markov models (HsMM).Information on www. ai. mit. edu/~murphyk, (2002).

Google Scholar

[5] Shun-Zheng Yu: Artificial Intelligence Vol. 174 (2010), p.215–243.

Google Scholar

[6] L. E Baum, T. Petrie: Ann. Math. Stat Vol. 37 (1966), pp.1554-1563.

Google Scholar

[7] Project H. Scan 17: Information on http: / www. honeynet. org /scans /scan17, (2002).

Google Scholar