基于排队网的入侵响应系统可生存性  

Survivability analysis of intrusion response system based on queuing nets

作　　者：熊琦[1,2] 彭勇[1] 戴忠华[1] 

机构地区：[1]中国信息安全测评中心,北京100085 [2]武汉大学计算机学院,武汉430072

出　　处：《清华大学学报（自然科学版）》2012年第10期1507-1512,共6页Journal of Tsinghua University(Science and Technology)

基　　金：国家自然科学基金重大项目资助(90818021)

摘　　要：入侵响应是提高系统可生存性的主要措施,入侵响应系统自身的生存能力至关重要。提出了一个基于排队网的入侵响应系统生存性分析模型,并将其转化为对应的二维Markov模型,通过拟生灭过程(QBD)的构造实现了模型的化简,使用频谱扩展法求出了模型的稳态概率分布。最后,在此基础上分别从阻塞概率和平均队长2个方面来量化入侵响应系统的可生存性。量化结果不仅可以用来检验系统的设计是否符合生存性要求,也可为系统结构和系统参数的优化调整提供依据。Intrusion response is a key measure of system survivability and the survivability of intrusion response system is critical.A survivability analysis model was developed using queuing nets transformed into a two-dimension Markov model and simplified into a quasi birth and death（QBD） process.The steady-state distribution is obtained based on the spectral expansion method.The blocking probability and the mean queue length of the intrusion response model are calculated to quantify the survivability of the intrusion response system.The results are useful not only for determining whether the survivability requirements are satisfied but also for optimizing the system structure and parameters.

关 键 词：入侵响应 可生存性 排队网 拟生灭过程(QBD) 频谱扩展 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]