Large-Scale Network Adaptive Situation Awareness Method in Spatio-Temporal Dimension

In large-scale networks, the state space is exploding and changing dynamically. This leads to difficulties in collecting and analyzing situational awareness data, so we construct an adaptive situational awareness model in spatio-temporal dimensions. In the spatial dimension, vulnerabilities’s threats are assessed through attack graphs combined with Shapley values. At the same time, vulnerability threats are dynamically quantified by updating the status node reachability probability in real time. In the temporal dimension, a game model is established by analyzing vulnerability attack graph nodes to dynamically adjust the observation frequency of high-risk vulnerabilities, focusing on the safety status characteristics of high-risk assets. Experimental results show that our proposal integrates the security features of both space and time dimensions. This method can better focus on high-risk vulnerabilities and accurately reflect the dynamic changes in the network security situation, ensuring timeliness and accuracy in network security detection.