网络安全态势定义

态势感知（Situation Awareness）最早见于航空飞行中人为因素的研究，此后在航空空中管制、电厂管理、军事指挥控制、消防和医疗紧急服务等领域被广泛地研究。网络势的概念借鉴于此，术语有Network Situation Awareness（NetSA）或Cyber Situation Awareness（CSA），网络安全态势（Network Security Situation Awareness）则具体指采用入侵检测或传感器等手段获取网络行为和网络设备运行状况、用户网络行为以及环境等因素构成的网络安全状况状态及变化趋势，并作出决策。

Definition of SA

"the percepton of elements in the environment within a volume of time and space, the comprehension of their meaning, and the projection of their status in the near future" (Endsley 1995)

"the combining of new information with existing knowledge in working memory and the development of a composite picture of the situation along with projection of future status and subsequent decisions as to appropriate couses of action to take" (Fraccker 1991)

SA is simply "knowing what is going on so you can figure out what to do" (Adam 1993)

"what you need to know not to be suprised" (Jeannot Kelly 2003)

Situation Assessment is import to distinguish the term situation awareness, as a state of knowledge, from the processes used to achieve that state. (Endsley 2000)