{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T00:58:42Z","timestamp":1760144322136,"version":"build-2065373602"},"reference-count":37,"publisher":"MDPI AG","issue":"4","license":[{"start":{"date-parts":[[2024,4,4]],"date-time":"2024-04-04T00:00:00Z","timestamp":1712188800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Entropy"],"abstract":"<jats:p>Network security situational awareness (NSSA) aims to capture, understand, and display security elements in large-scale network environments in order to predict security trends in the relevant network environment. With the internet\u2019s increasingly large scale, increasingly complex structure, and gradual diversification of components, the traditional single-layer network topology model can no longer meet the needs of network security analysis. Therefore, we conduct research based on a multi-layer network model for network security situational awareness, which is characterized by the three-layer network structure of a physical device network, a business application network, and a user role network. Its network characteristics require new assessment methods, so we propose a multi-layer network link importance assessment metric: the multi-layer-dependent link entropy (MDLE). On the one hand, the MDLE comprehensively evaluates the connectivity importance of links by fitting the link-local betweenness centrality and mapping entropy. On the other hand, it relies on the link-dependent mechanism to better aggregate the link importance contributions in each network layer. The experimental results show that the MDLE has better ordering monotonicity during critical link discovery and a higher destruction efficacy in destruction simulations compared to classical link importance metrics, thus better adapting to the critical link discovery requirements of a multi-layer network topology.<\/jats:p>","DOI":"10.3390\/e26040315","type":"journal-article","created":{"date-parts":[[2024,4,4]],"date-time":"2024-04-04T10:42:03Z","timestamp":1712227323000},"page":"315","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Research on a Critical Link Discovery Method for Network Security Situational Awareness"],"prefix":"10.3390","volume":"26","author":[{"given":"Guozheng","family":"Yang","sequence":"first","affiliation":[{"name":"College of Electronic Engineering, National University of Defense Technology, Hefei 230037, China"},{"name":"Anhui Province Key Laboratory of Cyberspace Security Situation Awareness and Evaluation, Hefei 230037, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yongheng","family":"Zhang","sequence":"additional","affiliation":[{"name":"College of Electronic Engineering, National University of Defense Technology, Hefei 230037, China"},{"name":"Anhui Province Key Laboratory of Cyberspace Security Situation Awareness and Evaluation, Hefei 230037, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yuliang","family":"Lu","sequence":"additional","affiliation":[{"name":"College of Electronic Engineering, National University of Defense Technology, Hefei 230037, China"},{"name":"Anhui Province Key Laboratory of Cyberspace Security Situation Awareness and Evaluation, Hefei 230037, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yi","family":"Xie","sequence":"additional","affiliation":[{"name":"College of Electronic Engineering, National University of Defense Technology, Hefei 230037, China"},{"name":"Anhui Province Key Laboratory of Cyberspace Security Situation Awareness and Evaluation, Hefei 230037, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jiayi","family":"Yu","sequence":"additional","affiliation":[{"name":"College of Electronic Engineering, National University of Defense Technology, Hefei 230037, China"},{"name":"Anhui Province Key Laboratory of Cyberspace Security Situation Awareness and Evaluation, Hefei 230037, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2024,4,4]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"1680","DOI":"10.1007\/s12083-023-01482-0","article-title":"Anomaly traffic detection based on feature fluctuation for secure industrial internet of things","volume":"16","author":"Yin","year":"2023","journal-title":"Peer-to-Peer Netw. Appl."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"1038","DOI":"10.1007\/s12083-019-00822-3","article-title":"Enhanced intrusion detection system via agent clustering and classification based on outlier detection","volume":"13","author":"Sandosh","year":"2020","journal-title":"Peer-to-Peer Netw. Appl."},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Fraunholz, D., Zimmermann, M., and Schotten, H.D. (2017, January 19\u201322). An adaptive honeypot configuration, deployment and maintenance strategy. Proceedings of the 2017 19th International Conference on Advanced Communication Technology (ICACT), PyeongChang, Republic of Korea.","DOI":"10.23919\/ICACT.2017.7890056"},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"IJRASET50797","DOI":"10.22214\/ijraset.2023.50797","article-title":"Web vulnerability scanning framework","volume":"11","author":"Shingate","year":"2023","journal-title":"Int. J. Res. Appl. Sci. Eng. Technol."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"885","DOI":"10.1360\/jos170885","article-title":"Quantitative hierarchical threat evaluation model for network security","volume":"17","author":"Qinghua","year":"2006","journal-title":"J. Softw."},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"012108","DOI":"10.1088\/1742-6596\/1883\/1\/012108","article-title":"Research on network security situation assessment technology based on fuzzy evaluation method","volume":"1883","author":"Kong","year":"2021","journal-title":"J. Phys. Conf. Ser."},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Li, X., Li, X., and Zhao, Z. (2016, January 17\u201319). Combining deep learning with rough set analysis: A model of cyberspace situational awareness. Proceedings of the 2016 6th International Conference on Electronics Information and Emergency Communication (ICEIEC), Beijing, China.","DOI":"10.1109\/ICEIEC.2016.7589715"},{"key":"ref_8","first-page":"1","article-title":"A rough set analysis model of network situation assessment","volume":"34","author":"Zhenghu","year":"2012","journal-title":"Comput. Eng. Sci."},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Zhang, Y., Lu, Y., Yang, G., Hou, D., and Luo, Z. (2022). An internet-oriented multilayer network model characterization and robustness analysis method. Entropy, 24.","DOI":"10.3390\/e24081147"},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Moresco, M., De S, A., Costa, Y.M.G., Senger, L.J., and Hochuli, A.G. (2022, January 9\u201312). Combining multi-layer features for plant species classification in a Siamese network. Proceedings of the 2022 IEEE International Conference on Systems, Man, and Cybernetics (SMC), Prague, Czech Republic.","DOI":"10.1109\/SMC53654.2022.9945552"},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Zhang, L., Chen, G., An, J., and Tian, L. (2023). A global optimal resource scheduling algorithm in multi-layer optical networks. J. Opt. Commun.","DOI":"10.1515\/joc-2023-0027"},{"key":"ref_12","first-page":"1","article-title":"Research on the identification of internet critical nodes based on multilayer network modeling","volume":"2022","author":"Zhang","year":"2022","journal-title":"Secur. Commun. Netw."},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"215","DOI":"10.1016\/0378-8733(78)90021-7","article-title":"Centrality in social networks conceptual clarification","volume":"1","author":"Freeman","year":"1978","journal-title":"Soc. Netw."},{"key":"ref_14","first-page":"79","article-title":"Evaluation method for node importance based on node contraction in complex networks","volume":"11","year":"2006","journal-title":"Syst. Eng. Theory Pract."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"581","DOI":"10.1007\/BF02289527","article-title":"The centrality index of a graph","volume":"31","author":"Sabidussi","year":"1966","journal-title":"Psychometrika"},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"724","DOI":"10.1109\/TCSS.2021.3070321","article-title":"Structural hole theory in social network analysis: A review","volume":"9","author":"Lin","year":"2021","journal-title":"IEEE Trans. Comput. Soc. Syst."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"7821","DOI":"10.1073\/pnas.122653799","article-title":"Community structure in social and biological networks","volume":"99","author":"Girvan","year":"2001","journal-title":"Proc. Natl. Acad. Sci. USA"},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"012040","DOI":"10.1088\/1742-6596\/1682\/1\/012040","article-title":"A tsp algorithm based on link degree","volume":"1682","author":"Yu","year":"2020","journal-title":"J. Phys. Conf. Ser."},{"key":"ref_19","first-page":"3157","article-title":"New link attack strategies of complex networks based on k-core decomposition","volume":"67","author":"Sun","year":"2020","journal-title":"IEEE Trans. Circuits Syst. II Express Briefs"},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"127851","DOI":"10.1016\/j.physa.2022.127851","article-title":"Robustness of interdependent scale-free networks based on link addition strategies","volume":"604","author":"Chen","year":"2022","journal-title":"Phys. A Stat. Mech. Appl."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"7332","DOI":"10.1073\/pnas.0610245104","article-title":"Structure and tie strengths in mobile communication networks","volume":"104","author":"Onnela","year":"2007","journal-title":"Proc. Natl. Acad. Sci. USA"},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/1514888.1514892","article-title":"Blocking Links to Minimize Contamination Spread in a Social Network","volume":"3","author":"Masahiro","year":"2009","journal-title":"ACM Trans. Knowl. Discov. Data"},{"key":"ref_23","unstructured":"Kazumi, S., Masahiro, K., Kouzou, O., and Hiroshi, M. (2016, January 22\u201326). Detecting Critical Links in Complex Network to Maintain Information Flow\/Reachability. Proceedings of the 14th Pacific Rim International Conference on Artificial Intelligence, Phuket, Thailand."},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"235","DOI":"10.1007\/s10844-018-0523-6","article-title":"Accurate and efficient detection of critical links in network to minimize information loss","volume":"51","author":"Kazumi","year":"2018","journal-title":"J. Intell. Inf. Syst."},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"1323","DOI":"10.3233\/IDA-205539","article-title":"Efficient computation of target-oriented link criticalness centrality in uncertain graphs","volume":"25","author":"Kazumi","year":"2021","journal-title":"Intell. Data Anal."},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Wasserman, S., and Faust, K. (1994). Social Network Analysis: Methods and Applications, Cambridge University Press.","DOI":"10.1017\/CBO9780511815478"},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Newman, M.E.J. (2010). Networks: An Introduction, Oxford University Press.","DOI":"10.1093\/acprof:oso\/9780199206650.003.0001"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"97","DOI":"10.1016\/j.physrep.2012.03.001","article-title":"Temporal networks","volume":"519","author":"Holme","year":"2012","journal-title":"Phys. Rep."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"203","DOI":"10.1093\/comnet\/cnu016","article-title":"Multilayer networks","volume":"2","author":"Mikko","year":"2014","journal-title":"J. Complex Netw."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"1025","DOI":"10.1038\/nature08932","article-title":"Catastrophic cascade of failures in interdependent networks","volume":"464","author":"Buldyrev","year":"2010","journal-title":"Nature"},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"193","DOI":"10.1007\/s10698-018-9318-7","article-title":"Research of chemical elements and chemical bonds from the view of complex network","volume":"21","author":"Liu","year":"2018","journal-title":"Found. Chem."},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"290","DOI":"10.1016\/j.physa.2016.02.009","article-title":"Using mapping entropy to identify node centrality in complex networks","volume":"453","author":"Nie","year":"2016","journal-title":"Phys. A-Stat. Mech. Its Appl."},{"key":"ref_33","unstructured":"Zhang, Y. (2023, December 05). Available online: https:\/\/github.com\/multilayer-go\/muti-layer-network."},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"549","DOI":"10.1016\/j.physa.2013.10.047","article-title":"Identifying and ranking influential spreaders in complex networks by neighborhood coreness","volume":"395","author":"Bae","year":"2014","journal-title":"Phys. A: Stat. Mech. Appl."},{"key":"ref_35","unstructured":"(2022). The SAGE Encyclopedia of Research Design, SAGE."},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Li, Z., Zeng, J., Chen, Y., and Liang, Z. (2022, January 26\u201330). Attackg: Constructing technique knowledge graph from cyber threat intelligence reports. Proceedings of the European Symposium on Research in Computer Security, Copenhagen, Denmark.","DOI":"10.1007\/978-3-031-17140-6_29"},{"key":"ref_37","unstructured":"Taylor, R., Kardas, M., Cucurull, G., Scialom, T., Hartshorn, A.S., Saravia, E., Poulton, A., Kerkez, V., and Stojnic, R. (2022). Galactica: A large language model for science. arXiv."}],"container-title":["Entropy"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1099-4300\/26\/4\/315\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T14:23:31Z","timestamp":1760106211000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1099-4300\/26\/4\/315"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,4,4]]},"references-count":37,"journal-issue":{"issue":"4","published-online":{"date-parts":[[2024,4]]}},"alternative-id":["e26040315"],"URL":"https:\/\/doi.org\/10.3390\/e26040315","relation":{},"ISSN":["1099-4300"],"issn-type":[{"type":"electronic","value":"1099-4300"}],"subject":[],"published":{"date-parts":[[2024,4,4]]}}}