A method for network security risk assessment and decision-making based on the cloud model

In order to assess the risk of network security more reasonably, a cloud-model based method for network risk assessment was proposed. It took advantages of cloud model featuring perfect combination with randomness and fuzziness. By analyzing the characteristic of the network risk assessment, the main ideas, key technical and implementation steps of the method were given. The standard clouds were generated using improved backward cloud algorithm with unknown certainty. The improved algorithm with smaller deviation was also proved. A cloud similarity algorithm, which was based on the distance measure of cloud droplets, was used to measure the similarity between the current cloud and the standard cloud. Finally, Kddcup99 data set was used to do simulated attack and performance sampling tests. The experimental results show that the proposed method retains the maximum uncertainty of network intrusion assessment and improves the results more credibly.