The Research on Network Security Situation Awareness Technology

With the continuous development of information technology, the scope of network application is constantly expanding, and a variety of virus, hacker and other attack methods emerge in endlessly. In the face of such a serious security threat, we know little or nothing about the attacker, the way of attack, the purpose of attack or the means of attack. In order to change the asymmetry of attack and defense, decrease the cost of attack and reduce the security threat to the actual system, the attacker's attack tools and methods are studied, and the source of attack is tracked in this research. Situation awareness technology emerges as the times require.