基于GSPN与状态图的拟态构造攻防建模与优化  

Attack and Defense Modeling and Optimization of Mimic Structure Based on GSPN and State Diagram

作　　者：马海龙[1] 任权 张鹏[1] MA Hailong;REN Quan;ZHANG Peng(Information Engineering University,Zhengzhou 450001,China)

机构地区：[1]信息工程大学,河南郑州450001

出　　处：《信息工程大学学报》2023年第6期711-717,共7页Journal of Information Engineering University

基　　金：国家自然科学基金资助项目(6187060786)。

摘　　要：当前针对拟态构造量化分析集中于建立安全模型,缺少对攻防成本的建模分析。针对不同攻击扰动与拟态系统动态重构、负反馈控制的防御特性,提出了基于广义随机Petri网(Generalized Stochastic Petri Net, GSPN)与状态图的拟态构造攻防成本建模与优化策略。首先从攻击者角度建立系统的攻击图和脆弱性状态图,从防御者角度建立防御状态图。再通过改变不同余度的构造,平衡系统的可用性与成本代价。仿真结果表明,拟态构造具有高于0.999 7的可用性。相比传统热备份系统,在约6.7%的成本损耗下拟态构造可有效降低防御代价。At present,the quantitative analysis of mimetic structures focuses on the establishment of security models,and lacks the modeling and analysis of attack and defense costs.By combining the dynamic reconfiguration,negative feedback control and defense characteristics of different attack perturbations and mimic systems,a modeling and optimization strategy for attack and defense costs of mimic structure based on generalized stochastic Petri net(GSPN)and state diagrams is proposed.First,the attack graph and vulnerability state graph of the system are established from the perspec-tive of the attacker,and the defense state graph is established from the perspective of the defender.Then the availability and cost of the system are balanced by modifying the structures with different redundancy.The simulation results show that the mimic structure has availability higher than 0.9997.Compared with hot-redundancy system,mimic structure effectively reduces the defense cost at less than 6.7%cost loss.

关 键 词：拟态构造 GSPN 状态图 建模 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]