基于快速网络模拟的安全态势预测  

Prediction of Security Situation Based on Fast Network Simulation

作　　者：王晓锋[1] 毛力[1] 杨国玲[1] 

机构地区：[1]轻工过程先进控制教育部重点实验室,江南大学物联网工程学院,无锡214122

出　　处：《系统仿真学报》2012年第6期1218-1222,共5页Journal of System Simulation

基　　金：国家自然科学基金(61103223);江苏省自然科学基金重点研究专项(江苏973)(BK2011003)

摘　　要：为提升网络安全态势预测的准确性,提出基于网络模拟的态势预测方法。该方法依靠网络模拟技术,详细推演网络安全行为的未来状态,并通过对状态数据进行分析与归纳,实现对网络安全态势的预测。为提升预测的时效性,研究核心节点路由静态存储以及动态连续计算等快速网络模拟技术。通过具有1720个节点的网络拓扑进行了实验验证:依靠快速网络模拟技术,整个态势预测所需的时间减少了51.7%,实现能提前获知未来的安全态势值;对所获得的安全态势曲线与实际安全行为进行对照分析,验证了安全态势预测的准确性。To improve the accuracy of the network security situation prediction,a situation prediction method based on network simulation was developed.In this method,the future status of network security behavior was deduced in detail via network simulation technology,and by analyzing and inducing the status data,the prediction of network security situation was realized.To improve the timeliness of prediction,the fast network simulation technologies,such as the static storage of routing for core node and the dynamic continuous computing,were researched.An experiment validation was carried out based on a network topology with 1720 nodes： by using the fast network simulation technologies,the total running time of situation prediction was decreased by 51.7%,and the future security situation value could be acquired ahead of time;by comparison analysis of the security situational graph and the actual security behavior,the accuracy of security situation prediction was validated.

关 键 词：网络模拟 网络安全态势 态势预测 计算开销 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]