Network Security Situation Awareness Based on Intercepting the Threat Spread

To increase the security of network system, we propose a network security situation awareness method based on intercepting the threat spread. This method firstly merges security data from different sensors to get the normalization data of network nodes, threats and vulnerability. And secondly, the method intercepts the threat spread by the normalization data. Finally, the method constructs the game analysis among the attacker, defender and neutral. Then the system manager can reinforce the most vulnerable node in real time according to the analysis. Experiment results show that our method can stably improve the security performance of the network system with the system continuously running.