English

应用科学学报 ›› 2024, Vol. 42 ›› Issue (2): 334-349.doi: 10.3969/j.issn.0255-8297.2024.02.014

• 计算机科学与应用 • 上一篇    下一篇

基于改进SKNet-SVM的网络安全态势评估

赵冬梅1,2,3, 孙明伟1, 宿梦月1, 吴亚星1   

  1. 1. 河北师范大学 计算机与网络空间安全学院, 河北 石家庄 050024;
    2. 河北师范大学 河北省网络与信息安全重点实验室, 河北 石家庄 050024;
    3. 供应链大数据分析与数据安全河北省工程研究中心, 河北 石家庄 050024
  • 收稿日期:2022-03-25 出版日期:2024-03-31 发布日期:2024-03-28
  • 通信作者: 赵冬梅,教授,研究方向为网络与信息安全。E-mail:dmzhao@hebtu.edu.cn E-mail:dmzhao@hebtu.edu.cn
  • 基金资助:
    国家自然科学基金（No.61672206）；中央引导地方科技发展资金（No.216Z0701G）；河北省省级科技计划（No.22567606H）；河北师范大学科研基金（No.L2023J04，No.L2021T09）资助

Network Security Situation Assessment Based on Improved SKNet-SVM

ZHAO Dongmei1,2,3, SUN Mingwei1, SU Mengyue1, WU Yaxing1   

  1. 1. Collage of Computer and Cyber Security, Hebei Normal University, Shijiazhuang 050024, Hebei, China;
    2. Hebei Key Laboratory of Network and Information Security, Hebei Normal University, Shijiazhuang 050024, Hebei, China;
    3. Hebei Provincial Engineering Research Center for Supply Chain Big Data Analytics & Data Security, Shijiazhuang 050024, Hebei, China
  • Received:2022-03-25 Online:2024-03-31 Published:2024-03-28

PDF

17

摘要： 为提高网络安全态势评估的准确率，增强稳定性与鲁棒性，提出一种基于改进选择性卷积核卷积神经网络和支持向量机的网络安全态势评估模型。首先，使用改进选择性卷积核代替传统卷积核进行特征提取，提高卷积神经网络感受野变化的自适应性，增强特征之间关联性。然后，将提取的特征输入到支持向量机中进行分类，并使用网格优化算法对支持向量机中的参数进行全局寻优。最后，根据网络攻击影响指标计算网络安全态势值。实验表明，基于改进选择性卷积核卷积神经网络和支持向量机的态势评估模型与传统的卷积神经网络搭建的态势评估模型相比，准确率更高，并且具有更强的稳定性和鲁棒性。

关键词: 网络安全态势评估, 网络安全态势感知, 改进选择性卷积核卷积神经网络, 支持向量机, 网格优化算法

Abstract: In order to improve the accuracy, stability, and robustness of network security situation assessment, a network security situation assessment model based on improved selective kernel convolutional neural network and support vector machine is proposed. Firstly,the traditional kernel for feature extraction is replaced with the improved selective kernel to enhance the adaptability of the convolutional neural network to changes in receptive field,thereby strengthening the correlation between features. Then, the extracted features are fed into the support vector machine for classification, and the grid optimization algorithm is used to optimize the parameters in the support vector machine globally. Finally, the network security situation value is calculated according to the network attack impact index.Experimental results show that the situation assessment model based on improved selective kernel convolutional neural network and support vector machine achieves higher accuracy,stronger stability and robustness compared to traditional convolutional neural networks.

Key words: network security situation assessment, network security situation awareness, improved selective kernel convolutional neural network, support vector machine, grid optimization algorithm

中图分类号: