Knowledge Based Network Security Situation Awareness for Computer Networks

Abstract

This paper proposes Network Security Situation Awareness (NSSA) based on Knowledge discovery. D-S evidence theory is applied as the fusion mechanism to analyze and fuse the security alert events gathered from various network security situation sensors. Network security situation is generated by extracting the frequent attack patterns based on knowledge discovery technique. The proposed system has improved results in terms of delay, energy consumption, packet delivery ratio and throughput as compared to without knowledge discovery technique.