基于免疫危险理论的网络安全态势评估  

Assessment of Network Security Situation Based on Immune Danger Theory

作　　者：陈妍伶[1] 汤光明[1] 孙怡峰[1] 

机构地区：[1]解放军信息工程大学,郑州450001

出　　处：《计算机科学》2015年第6期167-170,共4页Computer Science

基　　金：河南省科技攻关计划(122102210047)资助

摘　　要：为实时定量评估网络安全态势,提出了一种基于免疫危险理论的网络安全态势评估方法。通过研究免疫运行机制,定义了网络安全问题中的抗原、抗体和免疫细胞,描述了危险信号的判断规则,准确识别出了抗原。在分析免疫应答机制和免疫平衡机制中抗体浓度变化原因的基础上,给出了抗体浓度的计算方法。最后,结合抗体浓度与危险程度的关系,建立了基于抗体浓度的危险感知模型以实时定量评估网络安全态势。仿真实验表明,所提方法计算出的抗体浓度准确地反映了系统面临的危险程度,能够为网络管理提供有效的决策支持。In order to assess network security situation in real-time and quantification, an assessment method based on immune danger theory was proposed. Through studying the immune operation mechanism, antigen, antibody and im- mune cell in the problem of network security were defined. On the premise of describing the judgment rules of danger signal,the antigen is recognized accurately. Based on the changes of antibody density in the immune response and im- mune balance mechanisms, the calculation method of antibody density was given. Finally,by analyzing the relationship between antibody density and danger level, a danger awareness model based on antibody density was built to assess net- work security situation in real-time and quantification. The simulation results show that antibody density calculated by using the proposed method accurately reflects the danger level that the system faces, which can provide effective deci- sion-making support for network management.

关 键 词：危险理论 人工免疫 抗体浓度 网络安全 态势评估 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]