攻防博弈下深层次网络安全主动防御研究  

Research on Active Defense of Deep Level Network Security under Attack and Defense Games

作　　者：陈志浩 吴昕铭 曹淼 CHEN Zhi-hao;WU Xin-ming;CAO Miao(Beijing AsiaInfo Cloud Network Security Technology Co.,Ltd.,Beijing 100176,China)

机构地区：[1]北京亚信云网安全科技有限公司,北京100176

出　　处：《计算机仿真》2024年第12期482-486,共5页Computer Simulation

基　　金：北京亚信云网安全科技有限公司项目(2023021300123)。

摘　　要：网络环境的复杂性使得攻击手段多样化且不断演进,为了提升网络安全的主动防御能力,保护用户的隐私数据,提出了攻防博弈下深层次网络安全主动防御方法。以网络安全博弈图为基础,获得防御策略集合,建立攻防博弈模型。基于伪装成本考虑攻防行动对深层次信息网络安全的影响,结合攻击损失程度、攻击成功率与折扣系数,得到防御收益量化结果。根据量化结果,将防御策略变换成线性问题,设置线性规划限制条件,对线性规划问题进行求解,获得防御者的最佳混合策略,以此完成深层次网络安全主动防御。通过实验证明所提方法能够实现攻防博弈下深层次网络安全主动防御,有助于提升网络的安全性和可靠性,可有效应对网络攻击威胁,保护用户的隐私和数据安全。The complexity of the network environment makes the attack methods diversified and evolving,in order to improve the active defense capability of network security and protect the user's private data,a deep-level network security active defense method under the attack and defense game is proposed.Based on the network security game map,we obtain the set of defense strategies and establish the attack and defense game model.Based on the camouflage cost,the impact of attack and defense actions on deep-level information network security is considered,and the quantitative results of defense gain are obtained by combining the degree of attack loss,attack success rate and discount factor.According to the quantitative results,the defense strategy is transformed into a linear problem,linear programming constraints are set,and the linear programming problem is solved to obtain the optimal hybrid strategy of the defender,so as to complete the deep-level network security active defense.It is proved through experiments that the proposed method can realize the deep-level network security active defense under the attack and defense games,which can help to improve the security and reliability of the network,effectively respond to the threats of network attacks,and protect the privacy and data security of users.

关 键 词：攻防博弈 网络安全主动防御 深层次网络 收益量化 混合策略 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]