黑盒遗传算法下异构网络信息安全漏洞深度挖掘  

Deep Mining of Heterogeneous Network Information Security Vulnerability Based on Black Box Genetic Algorithm

作　　者：周浩[1] ZHOU Hao(Computer Department,Anhui Post and Telecommunication College,Hefei 230031,China)

机构地区：[1]安徽邮电职业技术学院计算机系,安徽合肥230031

出　　处：《太原师范学院学报（自然科学版）》2023年第3期33-38,共6页Journal of Taiyuan Normal University:Natural Science Edition

基　　金：安徽高校省级科学研究项目(2022AH052959);安徽省教育厅质量工程项目(2021jxtd148);安徽省职业教育创新发展试验区(WJ-ZYPX-066).

摘　　要：为设计有效测试信息用例,深度、全面挖掘异构网络信息安全漏洞,提出黑盒遗传算法下异构网络信息安全漏洞深度挖掘方法.其核心基于威胁概率计算的异构网络态势感知方法,在分析异构网络环境后,计算目前网络攻击状态与历史攻击状态之间相关性,分析网络威胁概率判断网络态势;针对属于异常态势的网络,基于黑盒遗传算法的漏洞深度挖掘模型,使用驱动Fuzzing测试工具,设计有效测试信息用例,将测试信息用例从异构网络链路层,发送至目标服务器,根据目标服务器所接收数据包中测试信息用例的缺失状态,便可判断信息安全是否存在漏洞.经测试,所提方法在挖掘信息安全漏洞时,所设计的有效测试信息用例的比例明显增大,对多种漏洞信息均可准确挖掘,具备深度、全面挖掘异构网络信息安全漏洞能力.In order to design effective test information cases and deeply and comprehensively mine heterogeneous network information security vulnerabilities,a deep mining method of heterogeneous network information security vulnerabilities based on black box genetic algorithm is proposed.This method uses the heterogeneous network situation awareness method based on threat probability calculation.After analyzing the heterogeneous network environment,it calculates the correlation between the current network attack state and the historical attack state,and analyzes the network threat probability to judge the network situation;For the network belonging to abnormal situation,the vulnerability depth mining model based on black box genetic algorithm drives the Fuzzy test tool,and the genetic algorithm is introduced to design effective test information cases in an evolutionary way.The test information cases are sent to the target server at the link layer of the heterogeneous network.Based on the missing state of the test information cases in the data packets received by the target server,we can determine whether there are vulnerabilities in the information security.It is tested that when the proposed method is used to mine information security vulnerabilities,the proportion of effective test information cases designed is significantly increased.It can accurately mine multiple vulnerability information and has the ability to deeply and comprehensively mine heterogeneous network information security vulnerabilities.

关 键 词：黑盒遗传算法 异构网络 信息安全 漏洞深度挖掘 网络态势感知 Fuzzing测试工具 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]