网络信息系统生存性层次化分析模型研究  

Research of Network Information System Survivability Hierarchy Analysis Model

作　　者：张乐君[1] 王巍[1] 国林[1] 杨武[1] 杨永田[1] 

机构地区：[1]哈尔滨工程大学信息安全研究中心,黑龙江哈尔滨150001

出　　处：《小型微型计算机系统》2008年第6期1117-1121,共5页Journal of Chinese Computer Systems

基　　金：国家"242"信息安全计划基金资助项目"大规模网络安全预警分析技术"(2005A33)资助

摘　　要：为了保障网络系统在面临攻击的时候能够稳定、可靠地提供服务,必须考虑网络系统自身的生存能力.分析影响网络系统生存性的首要因素是系统存在漏洞,而服务质量变化是系统生存性降低的外在表现形式.提出一种基于网络攻击图原理的层次化系统可生存性量化评估模型,该模型根据系统中关键服务及其原子服务组件信息,进行漏洞探测,生成网络攻击图和攻击方案,并对系统进行基于真实环境下的生存性测试,记录攻击中和攻击后的服务质量变化.通过服务质量变化分析系统生存性的四个关键属性(3R+A),最终实现对整个网络系统的生存性量化分析,并通过实验验证了该模型的有效性和准确性.In order to assure that network system could steadily and reliably deliver essential services in face of attack, the survivability of the system must be concerned.The most important factor which determining the network system survivability is leak.System＇s QoS （Quality of Server） is the exterior representation of network system survivability. This paper presents an analyzing model of network system survivability based on network attack graph. According to this model, the first step is gathering the information of key services and atomic service compositions and then detecting the leaks information. The second step is building the network attack graph and the attacking scheme. The third is replaying attacking data.At last,the survivability is quantified according the records of the Qos before and after attacking.From the result of the experiment,the model shows efficiency and practicability.

关 键 词：生存性模型 网络攻击图 服务质量 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]