基于CPN的信息系统安全防护能力建模方法  

Modeling for Security Protection Capability of Information System Based on CPN

作　　者：陈强军 张明清[1] 孔红山[1] 刘小虎[1] 邵连杰 Chen Qiangjun1, Zhang Mingqing1, Kong Hongshan1, Liu Xiaohu1, Shao Lianjie2(1. PLA Information Engineering University, Zhengzhou 450001, China; 2. Unit 68048 of the PLA, Baoji 721000, China)

机构地区：[1]解放军信息工程大学,河南郑州450001 [2]解放军68048部队,陕西宝鸡721000

出　　处：《系统仿真学报》2018年第10期3699-3709,3716,共12页Journal of System Simulation

摘　　要：建模对安全防护能力评估具有重要作用。结合安全防护能力评估方法多、更新快的特点,提出了基于监测、分析和响应的安全防护能力分析框架;针对防护设备智能学习和协作交互难以建模的问题,基于CPN(Colored Petri Nets)构建了安全防护能力分析模型。模型用消息颜色集的颜色表示系统事件的不同属性;建立了监测、分析和响应三种功能组件来表示安全防护能力的不同过程;给出了模型的2个定理,分析了模型复杂度。实例应用验证了模型的有效性,模型分析得出了其良好的通用性、扩展性和可分析性,表明可为安全防护能力的评估提供数据和模型支撑。Modeling plays an important role in assessment for security protection capability. Oriented to the features that evaluation has many methods which update quickly, the analysis frame is proposed based on detect, analyse and respond. Aimed at the problems that it is difficult to model the intelligent learning and coordination process for protective device, analysis model is built based on CPN. The colors of message color sets represent the different properties of events. Detect, analysis and respond components which represent different process of security protection capability are defined. Two theorems are proved, and model complexity is analyzed. The usability of model is verified, and excellent versatility, scalability and analyzability are reached by analyzing the application process. Results show that the model can provide data and model support for the evaluation on security protection capability.

关 键 词：安全防护能力 分析框架 CPN 分析模型 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]