基于动态博弈的粗糙网络安全分析模型  

Rough Network Security Analysis Model Based on Dynamic Game

作　　者：张晶[1] 李艳[1] 

机构地区：[1]西安建筑科技大学管理学院,西安710055

出　　处：《计算机工程》2015年第4期129-134,共6页Computer Engineering

基　　金：陕西省教育厅科研计划基金资助项目(2013JK0185);陕西省重点学科专项基金资助项目(E08001);陕西省高校哲学社会科学重点研究基地建设专项基金资助项目(DA08046);陕西省高校哲学社会科学特色学科建设专项基金资助项目(E08003;E08005);西安建筑科技大学人才科技基金资助项目(RC1324)

摘　　要：基于攻击图的主动网络安全测评是网络安全的战略研究方向,但目前多数网络攻击模型都是从攻击一方的角度进行分析,忽略了整个攻防过程中连接关系及知识体系的粗糙性。为此,结合攻击粗糙图和动态博弈理论提出粗糙网络安全分析模型RNSAM。以粗糙部件访问关联图为基础,刻画某一时刻网络拓扑结构状态下网络部件主体之间的粗糙访问关系,通过对攻击策略集和防御策略集在知识域空间上的粗糙刻画来反映攻防过程中的动态决策机制,同时给出攻击策略选取算法,指出在当前网络连接状态和攻防双方知识水平下的最优防御策略。实例分析结果表明,RNSAM能够完整模拟网络攻击过程,使网络管理员以最小的代价采取相关防御措施。Now the network security evaluation method based on attack graph becomes the main research point,but most of the netw ork attack models are analyzed from the standpoint of the attack side,and ignore the w hole process of the connection relationship betw een offensive and defensive and the roughness of the know ledge system. This paper uses the rough access components association graph to describe the rough access relationship among the netw ork components at some time and some special netw ork topology state,through the rough characterization of the attack and defense policy set in the know ledge domain space to reflect the dynamic decision-making mechanism in the process of offensive and defensive. It gives the optimal attack policy-selection algorithm simultaneously,points out the most possible defensive policy in the current state of the netw ork connection and the know ledge level of both sides of offensive and defensive.Examples show that the results of the analysis can help the defense side of the netw ork administrator take related defensive measures better.

关 键 词：网络风险分析 网络攻击模型 攻击图 粗糙博弈分析 粗糙网络 粗糙图 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]