Abstract: To maintain the security of network operation and ensure the secure storage of network information, a network security situation assessment system based on multi-source data mining is proposed. This study first establishes a three-layer network security situation system architecture with application layer, control layer, and data forwarding layer as the core. To ensure effective information transmission between the application layer and network devices, the OSGi (Open Service Gateway Initiative) design pattern is used to construct a five layer parallel architecture for the ONOS(Oper Network Operating System) controller of the control layer to ensure the decision-making response of the network security situation. Utilize the deployment of multiple detectors within the traffic detection module to achieve deep mining of network multi-source data; Introduce the LEACH(Low Energy Adaptive Clustering Hierarchy) algorithm to achieve multi-source data fusion at the network cluster head. After analyzing the threat level of network intrusion factors through the security situation assessment module, combined with the weight coefficient theory, the threat level of the network situation threat factors is assigned. Combined with the network hierarchical division method, the security situation of the operational network service layer, host layer, and network layer is evaluated in layers. The experiment shows that the proposed method has a high ability to analyze the operational status of network data, and can accurately identify attacks from multiple types of network threat factors, providing important guarantees for network security operation.

Key words: open service gateway initiative (OSGi) design pattern, open network operating system(ONOS) controller, low energy adaptive clustering hierarchy(LEACH) algorithm, weight coefficient theory, network hierarchical division method