Research on situation awareness of network security assessment based on dempster-shafer

There are a lot of uncertainties in the network security situation assessment that depends on is multi-source and heterogeneous. Therefore, the objective uncertainties must be described and dealt with in the process of network security situation assessment. This paper proposes a multi-attribute decision-making trust evaluation model based on D-S evidence theory in multi-source and heterogeneous environment. By collecting, processing and evaluating attack event information from many data sources of security device, it can effectively evaluate the possibility of network intrusion, and provide a new exploration for network security situation assessment