基于贝叶斯攻击图的光网络安全态势预测研究  

Research on optical network security situation prediction based on Bayesian attack graph

作　　者：罗宏芳[1] 王春枝[2] LUO Hongfang;WANG Chunzhi(School of Technology Engineering,Hubei University of Technology,Wuhan 430068,China;Shcool of Computer Science,Hubei University of Technology,Wuhan 430068,China)

机构地区：[1]湖北工业大学工程技术学院,武汉430068 [2]湖北工业大学计算机学院,武汉430068

出　　处：《激光杂志》2023年第8期134-138,共5页Laser Journal

基　　金：国家自然科学基金(No.61772180)。

摘　　要：针对网络攻击事件难以实时准确反映,导致光网络安全态势预测效果较差的问题,提出一种基于贝叶斯攻击图的光网络安全态势预测方法。利用漏洞扫描软件对网络中的缺陷进行扫描,获得初始数据,基于相关数据建立贝叶斯攻击图对网络中的不确定参数分析,计算各个节点的先验概率和后验概率,确定各个节点的危险等级,设定遗传算法的遗传算子与迭代次数,对特征数据降维处理,采用随机森林方法选择最优特征子集,对局部条件概率计算,实现光网络安全态势预测。实验结果表明,设计方法能够在短时间内就实现光网络安全态势的准确预测,满足方法设计需求。Aiming at the problem that network attack events are difficult to accurately reflect in real time,which leads to poor prediction effect of optical network security situation,this paper proposes a method of optical network se-curity situation prediction based on Bayesian attack graph.The vulnerability scanning software is used to scan the de-fects in the network,obtain the initial data,establish a Bayesian attack graph based on the relevant data,analyze the uncertain parameters in the network,calculate the prior probability and posterior probability of each node,determine the risk level of each node,set the genetic operator and iteration times of the genetic algorithm,reduce the dimension of the characteristic data,and select the best feature subset by using the random forest method,The local conditional probability is calculated to realize the security situation prediction of optical network.The experimental results show that the design method can accurately predict the security situation of optical network in a short time and meet the de-sign requirements of the method.

关 键 词：贝叶斯攻击图 光网络 安全态势 内在概率 累积概率 风险等级 

分 类 号：TN915[电子电信—通信与信息系统]