基于GSCPN模型的网络安全加固措施制定方法  

Method for Network Security Reinforcement Based on GSCPN Model

作　　者：高翔[1,2] 刘洋[1] 贺筱媛[1] 

机构地区：[1]国防大学信息作战与指挥训练教研部,北京100091 [2]数学工程与先进计算国家重点实验室,郑州450002

出　　处：《系统仿真学报》2016年第5期1009-1016,共8页Journal of System Simulation

基　　金：国家自然科学基金(61403401;61374179;61174156;61273189;61174035;71401168);军民共用重大研究计划联合基金(U1435218);全军军事科学研究计划课题(13QJ003-063)

摘　　要：为了从整体上提高网络安全性,提出了一种基于广义随机着色Petri网模型的网络安全加固措施制定方法。该方法引入主机节点利用率指数和主机节点关键度等概念,通过计算主机节点的关键度对网络中需要修补的脆弱节点进行排序,在此基础上根据最大节点关键度优先的原则逐步消除网络中存在的脆弱性。针对网络实例的分析进一步验证了所提出方法的有效性。与传统方法相比,具有可操作性强的特点,可以指导网络管理人员制定安全加固措施对目标网络进行安全加固。In order to improve the security of networks in whole, a method of making strategies for the network security reinforcement based on Generalized Stochastic Colored Petri Net was proposed. The concepts of host node utilization index and host node key degree were introduced, which enabled the vulnerable nodes that needed repairing sorted by the value of host node key degree. On this basis, security level of the target network was increased by the reinforcement according to the principle of maximum node key degree first. The network instance further validates that the proposed method for network security reinforcement is effective, and the operability is better than traditional methods.

关 键 词：安全评估 GSCPN模型 建模 安全加固 

分 类 号：TP301[自动化与计算机技术—计算机系统结构]