基于随机演化博弈模型的网络防御策略选取方法  

A Method for Selecting Defense Strategies Based on Stochastic Evolutionary Game Model

作　　者：黄健明 张恒巍[1,2] HUANG Jian-ming;ZHANG Heng-wei(The Third Institute,Information Engineering University,Zhengzhou,Henan 450001 ,China;State Key Laboratory of Mathematical Engineering and Advanced Computing,Zhengz hou,Henan 450001,China)

机构地区：[1]信息工程大学三院,河南郑州450001 [2]数学工程与先进计算国家重点实验室,河南郑州450001

出　　处：《电子学报》2018年第9期2222-2228,共7页Acta Electronica Sinica

基　　金：国家自然科学基金(No.61303074;No.61309013);河南省科技计划基金(No.12210231003;No.13210231002)

摘　　要：针对攻防博弈系统中存在攻防策略集和系统运行环境改变等各类随机干扰因素的问题,传统确定性博弈模型无法准确描述攻防博弈过程.利用非线性Itó随机微分方程构建随机演化博弈模型,用于分析攻防随机动态演化过程.通过求解,并根据随机微分方程稳定性判别定理对攻防双方的策略选取状态进行稳定性分析,设计出基于随机攻防演化博弈模型的安全防御策略选取算法.最后,通过仿真验证了不同强度的随机干扰对攻防决策演化速率的影响,且干扰强度越大,防御者更倾向于选择强防御策略,攻击者更倾向于选择强攻击策略.本文模型和方法能够用于网络攻击行为预测和安全防御决策.In the network attack-defense game systems,there are many stochastic facto rs,such as changes of attack-defense strategy sets and system operating environ ment.The traditional deterministic game model can not describe the game process of network attack and defense accurately.This paper constructed an attack-defe nse stochastic evolutionary game model by adapting the nonlinear Itóstochastic differential equations.The model can be applied to analyze the stochastic evol utionary process of network attack and defense.In addition,the stability of th e strategy selection of attack and defense was analyzed according to the discrim inant theorem of stochastic differential equations.Besides,an algorithm to sel ect the security defense strategies based on stochastic attack-defense evolutio nary game model was designed.Finally,the simulations demonstrate that the diffe rent intensity influences of stochastic interference on the speed of decision-m aking evolution of attack and defense.The attackers and defenders are more incli ned to choose strong strategies when the game system has great intensity of inte rference.The model and the method proposed in this paper can provide guidance f or attack behavior prediction and defense strategy selection.

关 键 词：网络安全 网络攻防 博弈论 有限理性 演化博弈 网络防御 Itó随机微分方程 策略 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]