Multilevel Network Security Monitoring and Evaluation Model

Based on the correspondence between the artificial immune system antibody and pathogen invasion intensity, this paper is to establish a real-time network risk evaluation model. According to the network intrusion own characteristics and the consequence from service, assets and attack, this paper design to build a hierarchical, quantitative measurement indicator system, and an unified evaluation information base and knowledge base. The paper also combines assets evaluation system and network integration evaluation system, considering from the application layer, the host layer, network layer may be factors that affect the network risks. The experimental results show that the new model improves the ability of intrusion detection and prevention than that of the traditional passive intrusion prevention systems.