基于随机Petri网模型的降质服务攻防效果评估  

RoQ Defense Effect Evaluations Based on SPN Model

作　　者：施江勇[1] 鲜明[1] 王会梅[1] 刘建[1] 

机构地区：[1]国防科学技术大学电子信息系统复杂电磁环境效应国家重点实验室,长沙410073

出　　处：《计算机科学》2014年第7期58-61,共4页Computer Science

摘　　要：针对DoS攻击的弱点,降质服务攻击(RoQ)利用常见的网络或终端系统自适应机制中存在的安全漏洞,通过间歇性地发送高强度攻击脉冲,降低受害者端的服务性能。RoQ攻击的隐蔽性更强,攻击效率更高,同时也给其检测和评估提出了挑战。分析了目前针对RoQ攻击的防范措施,主要有修改协议、攻击流特征检测以及自适应检测修复等。通过构建RoQ攻防的随机Petri网模型,使用SPNP软件仿真得出了服务质量随攻防博弈过程的变化情况,从而对不同防范措施的效果进行评估,为网络战攻防决策提供一些参考。To avoid the weakness of DoS attack,Reduction of Quality Attacks（RoQ） utilizes the security vulnerabilities in self-adaptive mechanism of network and terminal system by sending high strength pulse intermittently, thus reducing the service quality of victims. RoQ attacks are more elusive and efficient, which brings challenges to its detection and e- valuation. Right now the defense technologies to RoQ attacks mainly include mending protocol, detection of attack flows＇ features,self-adaptive detection and repairmen, and so on. This paper builded a Stochastic Petri Net（SPN） and used it in SPNP software to simulate the service quality changes in the process of attack and defense game. By evalua- ting the effects of different defense ways, this paper offered some consultancy for decision-makings in cyber defense ac- tivities.

关 键 词：随机PETRI网 降质服务攻击RoQ 攻防博弈 效果评估 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]