Abstract: Network security situation awareness (NSSA) is one of the effective ways to implement network security monitoring. It can be utilized to improve the operational security management and to enhance the proactive defense ability of the network. On the basis of the research work on NSSA models, a NSSA model based on intelligent agent was proposed with the consideration of current situation and demand of electric information network. With the aim of directing the security monitoring and management of electric information network, the proposed model describes the agent modeling and functional modules of four layers that are data collection and processing layer, evaluation and analysis layer, coordination and management layer and situation decision layer.

Key words: Information security,NSSA，Intelligent agent