Vulnerability Data Fusion Method Based on the D-S theory of Evidence

Author

Zhong Qiuxi ; Zhao Zhengye

Author_Institution

Coll. of Comput., Nat. Univ. of Defense Technol., Changsha, China

fYear

2012

fDate

8-10 Dec. 2012

Firstpage

735

Lastpage

738

Abstract

A fusion algorithm for network security situational awareness is proposed based on D-S theory of evidence, processing the vulnerability data from network scanning and host scanning. Though normalizing the vulnerability data, we constructed the corresponding basic probability assignment and fusion the data, fully used the redundancy and complementarity of multisource data, and integrated the results got by different scanning means. The results showed that this method obtained more comprehensive and reliable results.

Keywords

computer network security; inference mechanisms; probability; redundancy; sensor fusion; D-S evidence theory; host scanning; multisource data complementarity; multisource data redundancy; network scanning; network security situational awareness; probability assignment; vulnerability data fusion method; vulnerability data normalization; Computers; Data integration; Data models; Educational institutions; Probability; Reliability; Security; D-S theory of evidence; Data fusion; Situational awareness; Vulnerability; Vulnerability scan;

fLanguage

English

Publisher

ieee

Conference_Titel

Instrumentation, Measurement, Computer, Communication and Control (IMCCC), 2012 Second International Conference on

Conference_Location

Harbin

Print_ISBN

978-1-4673-5034-1

Type

conf

DOI

10.1109/IMCCC.2012.178

Filename

6429013