Evolution Analysis of Network Attack and Defense Situation Based on Game Theory  

作　　者：Haiyan Sun Chenglong Shao Jianwei Zhang Kun Wang Wanwei Huang 

机构地区：[1]College of Software Engineering,Zhengzhou University of Light Industry,Zhengzhou,450007,China [2]Intelligent Computing Power Research Department,Zhengzhou Xinda Advanced Technology Research Institute,Zhengzhou,450007,China

出　　处：《Computers, Materials & Continua》2025年第4期1475-1494,共20页计算机、材料和连续体(英文)

基　　金：supported by the Major Science and Technology Programs in Henan Province(241100210100);the National Natural Science Foundation of China(62072416);the Key Research and Development Special Project of Henan Province(221111210500);the Project of Science and Technology in Henan Province(242102211068,232102210078).

摘　　要：To address the problem that existing studies lack analysis of the relationship between attack-defense game behaviors and situation evolution from the game perspective after constructing an attack-defense model,this paper proposes a network attack-defense game model(ADGM).Firstly,based on the assumption of incomplete information between the two sides of the game,the ADGM model is established,and methods of payoff quantification,equilibrium solution,and determination of strategy confrontation results are presented.Then,drawing on infectious disease dynamics,the network attack-defense situation is defined based on the density of nodes in various security states,and the transition paths of network node security states are analyzed.Finally,the network zero-day virus attack-defense behaviors are analyzed,and comparative experiments on the attack-defense evolution trends under the scenarios of different strategy combinations,interference methods,and initial numbers are conducted using the NetLogo simulation tool.The experimental results indicate that this model can effectively analyze the evolution of the macro-level network attack-defense situation from the micro-level attack-defense behaviors.For instance,in the strategy selection experiment,when the attack success rate decreases from 0.49 to 0.29,the network destruction rate drops by 11.3%,in the active defense experiment,when the interference coefficient is reduced from 1 to 0.7,the network destruction rate decreases by 7%,and in the initial node number experiment,when the number of initially infected nodes increases from 10 to 30,the network destruction rate rises by 3%.

关 键 词：Network attack-defense situation evolution zero-day virus NETLOGO 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]