Security situation evaluation of service level in distributed mission-critical system

Attacks are evolving towards exploiting network services' or applications' vulnerabilities, which results in more and more focus on security of distributed mission-critical system whose aim is to satisfy users' service requirements. According to the resource dependencies in networked system, a hierarchical security situational evaluation metric model (SHL model) for distributed mission-critical system is proposed based on the service-host-link relationship, and four processes of perception, analysis, estimation and decision in situation evaluation are formally depicted. Principal component analysis (PCA) is adopted to reduce the multi-dimension data to a lower dimension which is used to represent service operational state. Network services in application layers are used to do situation evaluation experiment, and then quantitative security situation of network service level is finally accomplished.