Abstract: As existing methods can not express,share and reuse the network security situational information in a unified manner,a solution of network security situational elements knowledge base model based on ontology was presented.Firstly,combining with the multi-source heterogeneous characteristic of network security situational elements knowledge,classification and acquirement are accomplished.Secondly,according to the principles of ontology construction,the network security situational elements knowledge base model which includes domain ontology,applied ontology and atomic ontology is established.Finally,through situation scenario analysis,model can effectively acquire network security situation knowledge.

Key words: Network security situation awareness,Ontology,Knowledge base,Situation scenario