基于免疫优化原理的网络安全态势预测方法  

A new approach for network security situation predictionbased on the immune optimization theory

作　　者：石元泉[1,2] 刘晓洁[1] 李涛[1] 彭小宁[2] 陈文[1] 张瑞瑞[1] 

机构地区：[1]四川大学计算机学院,成都610065 [2]怀化学院计算机系,怀化418000

出　　处：《高技术通讯》2012年第1期20-27,共8页Chinese High Technology Letters

基　　金：国家自然科学基金（60873246）,教育部博士点基金（20070610032）和教育部重大项目培育基金（708075）资助项目

摘　　要：为有效监视网络安全态势变化和预防网络遭受大规模安全攻击，受人工免疫系统居发，提出了一种基于免疫优化原理的网络安全态势预测方法（NSSPAI）。该预测方法首先给出网络安全态势预测环境下抗原、抗体和亲和力的定义，以及用于挖掘态势预测模型的抗体优化算子的抽象数学模型；然后利用相空间重构理论分析网络安全态势时间序列，利用重构后的样本空间和免疫优化建模方法挖掘态势预测模型；最后利用该预测模型来预测未来的网络安全态势。实验结果表明，与基于遗传算法的预测方法相比，NSSPAI预测方法能够更为准确地预测网络安全态势，是一种有效预测网络安全态势的新方法。To effectively monitor networks＇ security situation and prevent large-scale networks from being attacked, a novel network security situation prediction approach based on the immune optimization theory. （NSSPAI） is proposed. The NSSPAI works according to the steps described belows： firstly, it gives the definitions of antigen, antibody and affinity in the environment of network security situation prediction, and gives the mathematical models of some antibody optimizing operators for constructing a prediction model ; secondly, the time series of network security situation is analyzed by using the phase space reconstruction theory, and a prediction model is established by using the reconstructed sample space and the immune optimizing modeling method; lastly, the future network security situation is predicted by this model. The experimental results show that the NSSPAI can forecast the future network security situation more exactly than the genetic algorithm based prediction approach, and it is a new method for effective prediction of network security situation.

关 键 词：网络安全 态势感知 时间序列 免疫优化 预测 

分 类 号：TP18[自动化与计算机技术—控制理论与控制工程]