基于Petri网的可信连接架构的安全属性分析  

Security attributes analysis of trusted connect architecture based on Petri net

作　　者：任兴田[1] 

机构地区：[1]北京工业大学计算机学院,北京100124

出　　处：《高技术通讯》2012年第8期812-818,共7页Chinese High Technology Letters

基　　金：973计划（2007CB311100）资助项目.

摘　　要：为确保可信连接架构（TCA）自身的安全可靠，研究了其安全属性量化问题，分析了其双向用户身份认证和平台认证过程中存在的安全威胁。利用随机Petri网对带有攻击行为的TCA可信网络连接过程进行了建模，该模型用于描述攻击行为和TCA的双向认证过程。以该模型为基础构造了马尔科夫链，通过计算马尔科夫模型的稳定状态概率对TCA的稳定状态机密性和完整性等安全属性进行定量分析。最后给出了一个具体数值评估结果的实例。此研究给出的方法有理论和实用意义。From the purpose of ensuring the security and reliability of the trusted connect architecture （ TCA）, the issues related to quantifying its security attributes were studied, and the security threats in its bi-directional user identity authentication and platform authentication were analyzed. The trusted network connect process under attack behav- iors was modeled as a stochastic Petri net. This model was used to describe attack behaviors and hi-directional au- thentication process in TCA. The main security attributes of confidentiality and integrity were analyzed and quantified by computing the steady state probability of a Markov model derived from the stochastic Petri net. Finally, the model analysis was illustrated in a numerical example. The method demonstrated in the study is of theoretical and practical significance.

关 键 词：可信计算 可信连接架构(TCA) 安全属性 定量分析 随机PETRI网 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]