基于博弈模型的网络风险量化评估方法  

Network Security Risk Quantification Assessment Based On Game Model

作　　者：张树伟[1,2] 刘文芬[1,2] 魏江宏[1,2] 

机构地区：[1]数学工程与先进计算国家重点实验室,河南郑州450001 [2]信息工程大学,河南郑州450001

出　　处：《信息工程大学学报》2014年第2期156-162,共7页Journal of Information Engineering University

基　　金：国家973计划资助项目(2012CB315905;2012CB315901)

摘　　要：网络安全风险评估是网络系统安全管理的基础和前提,基于博弈模型的安全分析方法可以较好地刻画网络攻防博弈中人为因素对网络风险的影响。文章采用两人零和博弈模型描述网络攻防博弈过程,通过细化模型中的攻防策略,能够以较低的复杂度准确计算博弈双方的收益;此外,在网络风险计算过程中,对不同节点进行区分,引入相对重要性的概念,充分刻画出不同节点对网络风险贡献的差异性,使得风险计算更加贴近网络实际。仿真实验验证了该方法的可行性与有效性。Network security risk assessment is the basis for network security management systems. The analysis method based on game theory can better describe the effect of human factors on network risk. A two-person zero-sum game model is proposed to characterize the process of network attack game. By refining the model of offensive and defensive strategies, both players＇ gain can be calcu- lated with high accuracy and low complexity. In addition, by distinguishing the different nodes in the network, and considering the relative importance of the nodes, the contribution of different nodes to network risk can be characterized adequately. Simulation results demonstrate the feasibility and effectiveness of the proposed method.

关 键 词：网络安全 风险评估 博弈论 两人零和博弈模型 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]