Dynamic defense decision method for network real-time confrontation

Qiang LENG; Yingjie YANG; Dexian CHANG; Ruixuan PAN; Ying CAI; Hao HU

doi:10.11959/j.issn.2096-109x.2019063

您当前的位置：

首页 >

文章列表页 >

Dynamic defense decision method for network real-time confrontation

Papers | 更新时间：2024-06-03

- Dynamic defense decision method for network real-time confrontation
- Chinese Journal of Network and Information Security Vol. 5, Issue 6, Pages: 58-66(2019)
- 作者机构：
  
  1. 信息工程大学，河南郑州 450001
  2. 河南省理工学校，河南郑州 450001
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2019063
  CLC： TP393
- Online First：2019-12，
  
  Published：15 December 2019
- 稿件说明：
移动端阅览
Qiang LENG, Yingjie YANG, Dexian CHANG, et al. Dynamic defense decision method for network real-time confrontation[J]. Chinese Journal of Network and Information Security, 2019, 5(6): 58-66.
DOI：

Qiang LENG, Yingjie YANG, Dexian CHANG, et al. Dynamic defense decision method for network real-time confrontation[J]. Chinese Journal of Network and Information Security, 2019, 5(6): 58-66. DOI： 10.11959/j.issn.2096-109x.2019063.

摘要

如何基于网络外在威胁实施防御决策是构建网络信息防御体系的核心问题，针对实时攻击带来的动态威胁进行科学有效的防御决策是构建网络动态应急防御体系的关键。针对动态防御决策问题，首先基于属性攻击图理论设计了一种网络生存性博弈模型，利用攻防矩阵表示攻防策略和路径，并给出了攻防强度和网络生存性量化方法；其次提出了单步与多步的攻、防策略支出计算方法，并基于攻防策略支出给出防御决策；最后通过实验进行防御决策技术的有效性验证。

Abstract

How to implement defense decision based on network external threat is the core problem of building network information defense system.Especially for the dynamic threat brought by real-time attack

scientific and effective defense decision is the key to construct network dynamic emergency defense system.Aiming at the problem of dynamic defense decision-making

firstly a network survivability game model based on attribute attack graph theory is designed.The attack and defense matrix is used to represent the attack and defense strategy and path

and the attack and defense strength and network survivability quantification method are given.Secondly

the single step and the multi-step attack and defense strategy payoff calculation method is proposed

and the defense decision is based on the attack and defensive strategy payoff.Finally

the effectiveness of the defense decision technology is verified through experiments.

关键词

Keywords

references

FISHER J , LINGER R . Survivability:protecting your critical systems [J ] . IEEE Journal of Internet Computing , 1999 , 3 ( 6 ): 55 - 63 .

WANG CL , MIAO Q , DAI YQ . Network survivability analysis based on stochastic game model [J ] . Multimedia Information Networking and Security , 2012 , 55 ( 10 ): 99 - 104 .

黄永洪 , 吴一凡 , 杨豪璞 , 等 . 基于攻击图的APT脆弱节点评估方法 [J ] . 重庆邮电大学学报(自然科学版) , 2017 , 29 ( 4 ): 535 - 541 .

HUANG Y H , WU Y F , YANG H P , et al . Graph-based vulnerability assessment for APT attack [J ] . Journal of Chongqing University of Posts and Telecommunications(Natural Science Edition) , 2017 , 29 ( 4 ): 535 - 541 .

HU H , ZHANG H Q , LIU Y L , et al . Security metric methods for network multistep attacks using AMC and big data correlation analysis [J ] . Security and Communication Networks , 2018 .

胡浩 , 叶润国 , 张红旗 , 等 . 面向漏洞生命周期的安全风险度量方法 [J ] . 软件学报 , 2018 , 29 ( 5 ).

HU H , YE R G , ZHANG H Q , et al . Vulnerability life cycle oriented security risk metric method [J ] . Journal of Software , 2018 , 29 ( 5 ).

吴迪 , 连一峰 , 陈恺 . 一种基于攻击图的安全威胁识别和分析方法 [J ] . 计算机学报 , 2012 , 35 ( 9 ): 1938 - 1950 .

WU D , LIAN Y F , CHEN K , et al . A security threats identification and analysis method based on attack graph [J ] . Chinese Journal of Computers , 2012 , 35 ( 9 ): 1938 - 1950 .

HOMER J , ZHANG S , OU X , et al . Aggregating vulnerability metrics in enterprise networks using attack graphs [J ] . Journal of Computer Security , 2013 , 21 ( 4 ): 561 - 597 .

王会梅 , 鲜明 , 王国玉 . 基于扩展网络攻击图的网络攻击策略生成算法 [J ] . 电子与信息学报 , 2011 , 33 ( 12 ): 3015 - 3021 .

WANG H M , XIAN M , WANG G Y . A network attack decision-making algorithm based on the extended attack graph [J ] . Journal of Electronics ＆ Information Technology , 2011 , 33 ( 12 ): 3015 - 3021 .

WANG H , CHEN Z F , ZHAO J P , et al . A vulnerability assessment method in industrial internet of things based on attack graph and maximum flow [J ] . Special Section on Convergence of Sensor Networks,Cloud Computing,and Big Data in Industrial Internet of Thing , 2018 ,( 6 ): 8599 - 8609 .

WANG Y Z , LIN C , CHENG X Q , et al . Evolutionary game model and analysis methods for network group behavior [J ] . Chinese Journal of Computer , 2015 , 38 ( 2 ): 282 - 300 .

SHEN S G , LI Y J , XU H Y , et al . Signaling game based strategy of intrusion detection in wireless sensor networks [J ] . Computer＆Mathematics with Applications , 2011 , 62 ( 6 ): 2404 - 2416 .

DORASZEL A . Preventing DDoS attacks in wireless sensor networks:a repeated game theory approach [J ] . ACM Transactions on Information and System Security , 2015 , 13 ( 2 ): 145 - 153

张恒巍 , 李涛 , 黄世锐 . 基于攻防微分博弈的网络安全防御决策方法 [J ] . 电子学报 , 2018 , 46 ( 6 ): 1428 - 1435 .

ZHANG H W , LI T , HUANG S R . Network defense decision-making method based on attack-defense differential game [J ] . Acta Electronica Sinica , 2018 , 46 ( 6 ): 1428 - 1435 .

HU H , LIU Y L , ZHANG H Q , et al . Optimal network defense strategy selection based on incomplete information evolutionary game [J ] . IEEE Access , 2018 , 6 : 29806 - 29821 .

GORDON L , LOEB M , LUCYSHYN W , et al . 2015 CSI/FBI computer crime and security survey [C ] // 2015 Computer Security Institute . 2015 : 48 - 64 .

ZHAN X Z . Matrix theory [D ] . American Mathematical Society , 2010 .

Views

382

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

No data

Related Author

No data

Related Institution

No data

⁰