协同缓解PIoT未披露漏洞的黑板积分激励方案  

A blackboard-scoring incentive scheme for collaborative mitigation of PIoT undisclosed vulnerabilities

作　　者：冯景瑜[1] 时翌飞 FENG Jingyu;SHI Yifei(School of Cyberspace Security,Xi'an University of Posts and Telecommunications,Xi'an 710121,China)

机构地区：[1]西安邮电大学网络空间安全学院,陕西西安710121

出　　处：《西安邮电大学学报》2022年第1期15-22,共8页Journal of Xi’an University of Posts and Telecommunications

基　　金：国家自然科学基金项目(62102312);国家电网有限公司科技项目(J2021206)。

摘　　要：为快速阻断未披露漏洞对于电力物联网(Power Internet of Things,PIoT)终端的持续性威胁,提出一种群智协同缓解未披露漏洞的黑板积分激励方案,在抑制自私性和抵御共谋团体的条件下加快漏洞加固流程。采用黑板积分,引入群智协同缓解方案质量评估方法辅助量化协同贡献度,构建电力物联网漏洞缓解的全流程激励方案。联合信任机制和协同组划分规则动态选取每轮参与缓解的群智协同者,抑制共谋团体形成。为进一步提升协同缓解效率,设置多智能体可信协调器,分散协同角色责任避免单点失效。通过与无激励方案、基于声誉的区块链矿工激励方案、基于历史行为的群智感知激励方案相比,仿真结果表明,所提方案可在抑制恶意提交的条件下,有效激励协同者积极参与未披露漏洞协同缓解。To quickly prevent the continuous threats that undisclosed vulnerabilities have to the power Internet of Things(PIoT),propose a blackboard-scoring incentive scheme of crowd-based cooperative mitigation,to accelerate reinforcement of the vulnerability while preventing selfishness and collusive attack.The mitigation solution quality assessment method is adopted,which is quantified into the blackboard-scoring system together with the contribution of collaborators,to construct a full-process incentive scheme for vulnerability mitigation in PIoT.Meanwhile,the trust value of collaborator is introduced,together with the coordination group division rules,collaborators are dynamically selected to participate in coordinated mitigation task against collusive clique formation.To further enhance the efficiency of collaborative mitigation,multi-agent coordinator is designed to decentralize the responsibilities of collaborators,and to avoid single point of failure.Compared with the reputation-based blockchain miner incentive scheme,the historical behavior-based crowd sensing incentive scheme,and incentive free scheme,the simulation results show that the proposed scheme is resilient to suppress malicious proposals and can effectively motivate collaborators to actively participate in collaborative mitigation of undisclosed vulnerabilities.

关 键 词：电力物联网 群智协同 黑板积分 自私性抑制 信任机制 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]