网络安全评估与分析模型研究

刘文彦; 霍树民; 仝青; 张淼; 齐超

doi:10.11959/j.issn.2096-109x.2018019

您当前的位置：

首页 >

文章列表页 >

网络安全评估与分析模型研究

综述 | 更新时间：2024-06-03

- 网络安全评估与分析模型研究
- Research on models of network security evaluation and analysis
- 网络与信息安全学报 2018年4卷第4期页码：1-11
- 作者机构：
- 作者简介：
  
  [ "刘文彦（1986-），男，河南周口人，博士，国家数字交换系统工程技术研究中心助理研究员，主要研究方向为网络空间安全、云安全。" ]
  [ "霍树民（1985-），男，山西长治人，博士，国家数字交换系统工程技术研究中心助理研究员，主要研究方向为网络空间安全、SDN安全。" ]
  [ "仝青（1992-），女，河南郑州人，国家数字交换系统工程技术研究中心博士生，主要研究方向为网络空间安全防御技术、主动防御技术。" ]
  [ "张淼（1994-），男，湖北孝感人，国家数字交换系统工程技术研究中心硕士生，主要研究方向为网络安全防御。" ]
  [ "齐超（1991-），男，江西南昌人，国家数字交换系统工程技术研究中心博士生，主要研究方向为网络空间拟态防御技术。" ]
- 基金信息：
  
  国家自然科学基金资助项目;The National Science Foundation for Distinguished Young Scholars of China(61602509);国家自然科学基金创新研究群体基金资助项目;The Foundation for Innovative Research Groups of the National Natural Science Foundation of China(61521003);国家重点研发计划项目;The National Key R＆D Program of China(2016YFB0800100);国家重点研发计划项目;The National Key R＆D Program of China(2016YFB0800101)
- DOI：10.11959/j.issn.2096-109x.2018019
  中图分类号： TP393.08
- 网络首发：2018-04，
  
  纸质出版：2018-04-15
- 稿件说明：
移动端阅览
刘文彦, 霍树民, 仝青, 等. 网络安全评估与分析模型研究[J]. 网络与信息安全学报, 2018,4(4):1-11.

Wenyan LIU, Shumin HUO, Qing TONG, et al. Research on models of network security evaluation and analysis[J]. Chinese Journal of Network and Information Security, 2018, 4(4): 1-11.
刘文彦, 霍树民, 仝青, 等. 网络安全评估与分析模型研究[J]. 网络与信息安全学报, 2018,4(4):1-11. DOI： 10.11959/j.issn.2096-109x.2018019.

Wenyan LIU, Shumin HUO, Qing TONG, et al. Research on models of network security evaluation and analysis[J]. Chinese Journal of Network and Information Security, 2018, 4(4): 1-11. DOI： 10.11959/j.issn.2096-109x.2018019.

摘要

网络安全评估有助于清楚掌握其网络信息系统目前与未来的风险所在，并给出相应的安全建议和对策。网络安全评估与分析模型是其中重要的研究方向和内容，当前尚无对此进行全面总结和分析的综述文章。对常用的网络安全评估与分析模型进行综述，首先介绍了以攻击为中心的模型，如攻击树、攻击图、攻击链等；然后阐述以防御或攻防交互为中心的模型，如攻击面、网络传染病、Petri网、自动机等，对这些模型，分别介绍了其基本概念、适用领域、建模分析过程以及优势和不足，同时给出数个典型案例说明模型在网络防御技术评估分析中的应用。

Abstract

Network security assessment helps to grasp the current and future risks of the network information system clearly

and gives corresponding security suggestions and countermeasures.Model of network security assessment and analysis is an important research direction and content

for which there is no review to give a comprehensive summary or analysis.A review of common network security evaluation and analysis model was given.The model that focus on attack was introduced

such as the attack tree

attack graph and kill chain

then the model that focus on network defense or offensive and defensive interaction was explained

such as attack surface

cyber epidemic model

Petri nets and automation machine

giving introduction to the basic concept

application field

modeling analysis process

advantages and disadvantages of the models.Then

typical examples were given to illustrate the application of the models in network defense technology evaluation and analysis.

关键词

Keywords

references

井维亮 . 基于攻击图的网络安全评估技术研究 [D ] . 哈尔滨:哈尔滨工程大学 , 2008 .

JING W L . Research on network security assessment based on at-tack graph [D ] . Harbin:Harbin Engineering University , 2008 .

高翔 . 网络安全评估理论及其关键技术研究 [D ] . 郑州:信息工程大学 , 2014 .

GAO X . Research on the theory of network security and its key technology [D ] . Zhengzhou:Information Engineering University , 2014 .

王国良 , 鲁智勇 . 信息网络安全测试与评估 [M ] . 北京 : 国防工业出版社 , 2015 .

WANG G L , LU Z Y . Testing and evaluation of information net-work security [M ] . Beijing : National Defense Industry Press , 2015 .

代廷合 , 吴开贵 . 攻击树在多层网络攻击模型中的应用 [J ] . 网络安全技术与应用 , 2009 ( 1 ): 75 - 76 .

DAI T H , WU K G . Application of attack tree in multi level net-work attack model [J ] . Network security technology and Applica-tion , 2009 ( 1 ): 75 - 76 .

苘大鹏 , 周渊 , 杨武 , 等 . 用于评估网络整体安全性的攻击图生成方法 [J ] . 通信学报 , 2009 ,( 3 ): 1 - 5 .

QIONG D P , ZHOU Y , YANG W . Method to generate attack graphs for assessing the overall security of networks [J ] . Journal on Communications , 2009 ,( 3 ): 1 - 5 .

鲁智勇 , 冯超 , 余辉 , 等 . 网络安全性定量评估模型研究 [J ] . 计算机工程与科学 , 2009 , 31 ( 10 ): 18 - 22 .

LU Z Y , FENG C , YU H , et al . A study of the quantitative evalua-tion model for network security [J ] . Computer Engineering ＆ Sci-ence , 2009 , 31 ( 10 ): 18 - 22 .

SANDOVAL J E , HASSELL S P . Measurement,identification and calculation of cyber defense metrics [C ] // IEEE Military Communications Conference . 2010 : 2174 - 2179 .

CAI G , WANG B , LUO Y , et al . A model for evaluating and comparing moving target defense techniques based on generalized stochastic Petri net [M ] . Springer Singapore , 2016 : 184 - 197 .

JASIUL B , SZPYRKA M , LIWA J . Detection and modeling of cyber attacks with Petri nets [J ] . Entropy , 2014 , 16 ( 12 ): 6602 - 6623 .

JASIUL B , SZPYRKA M,ŚLIWA J . Malware behavior modeling with colored Petri nets [C ] // The International Conference Computer Information Systems and Industrial Management . 2014 8838: 667 - 679 .

杨艳峰 , 李洁 . 基于有限状态自动机的安全评估模型分析 [J ] . 企业家天地 , 2013 ( 6 ): 125 - 126 .

YANG Y F , LI J . Analysis of safety assessment model based on fi-nite state automata [J ] . Entrepreneurs World , 2013 ( 6 ): 125 - 126 .

张峰 , 秦志光 . 基于有限自动机的网络攻击系统研究 [J ] . 计算机科学 , 2002 , 29 ( 21 ): 160 - 162 .

ZHANG F , QIN Z G . Research on network attack system based on finite-state automata [J ] . Computer Science , 2002 , 29 ( 21 ): 160 - 162 .

卢继军 , 黄刘生 , 吴树峰 . 基于攻击树的网络攻击建模方法 [J ] . 计算机工程与应用 , 2003 , 39 ( 27 ): 160 - 163 .

LU J J , HUANG L S , WU S F . Network attack modeling method based on attack tree [J ] . Computer Engineering and Applications , 2003 , 39 ( 27 ): 160 - 163 .

陈建明 , 龚尧莞 . 基于 SSE-CMM 的信息系统安全工程模型 [J ] . 计算机工程 , 2003 , 29 ( 16 ): 35 - 36 .

CHEN J M , GONG Y W . Security engineering model of infor-mation system based on SSE-CMM [J ] . Computer Engineering , 2003 , 29 ( 16 ): 35 - 36 .

DANIEL GEER J , HOO K S , JAQUITH A . Information security:why the future belongs to the quants [J ] . IEEE Security ＆ Privacy Magazine , 2003 , 1 ( 4 ): 24 - 32 .

CUNNINGHAM W H . Optimal attack and reinforcement of a network [J ] . Journal of the ACM , 1985 , 32 ( 3 ): 549 - 561 .

BRYANT B , SAIEDIAN H . A novel kill-chain framework for remote security log analysis with SIEM software [J ] . Computers ＆Security , 2017 .

YADAV T , RAO A M . Technical aspects of cyber kill chain [C ] // The International Symposium on Security in Computing and Communication . 2015 : 438 - 452 .

HUTCHINS E M , CLOPPERT M J , AMIN R M . Intelligence-driven computer network defense informed by analysis of adversary campaigns and intrusion kill chains [J ] . Leading Issues in Information Warfare ＆ Security Research , 2011 , 1 ( 1 ): 80 .

蔡桂林 , 王宝生 , 王天佐 , 等 . 移动目标防御技术研究进展 [J ] . 计算机研究与发展 , 2016 , 53 ( 5 ): 968 - 987 .

CAI G L , WANG B S , WANG T Z , et al . Research and develop-ment of moving target defense technology [J ] . Journal of Computer Research and Development , 2016 , 53 ( 5 ): 968 - 987 .

邬江兴 . 网络空间拟态防御研究 [J ] . 信息安全学报 , 2016 , 1 ( 4 ): 1 - 10 .

WU J X . Research on cyber mimic defense [J ] . Journal of Cyber Security , 2016 , 1 ( 4 ): 1 - 10 .

MANADHATA P K , WING J M . An attack surface metric [J ] . IEEE Transactions on Software Engineering , 2011 , 37 ( 3 ): 371 - 386 .

MANADHATA P , WING J , FLYNN M , et al . Measuring the attack surfaces of two FTP daemons [C ] // ACM Workshop on Quality of Protection . ACM , 2006 : 3 - 10 .

Vargasdeleón C . On the global stability of SIS,SIR and SIRS epidemic models with standard incidence [J ] . Chaos Solitons ＆ Fractals , 2011 , 44 ( 12 ): 1106 - 1110 .

MCDERMOTT J P , . Attack net penetration testing [C ] // The Workshop on New Security Paradigms . 2001 : 15 - 21 .

PAN P , ZHU X , MAO X . Research on security test for application software based on SPN [J ] . Procedia Engineering , 2017 , 174 : 1140 - 1147 .

MARSAN M A , . Stochastic Petri nets:an elementary introduction [C ] // European Workshop on Applications and Theory in Petri Nets . 1988 : 1 - 29 .

JENSEN K , KRISTENSEN L M , WELLS L . Coloured petri nets and CPN tools for modelling and validation of concurrent systems [J ] . International Journal on Software Tools for Technology Transfer , 2007 , 9 ( 3-4 ): 213 - 254 .

MAJI P , GANGULY N , SAHA S , et al . Cellular automata machine for pattern recognition [J ] . Lecture Notes in Computer Science , 2002 , 2493 : 270 - 281 .

秦志光 , 刘锦德 . 安全系统的有限自动机 [J ] . 电子科技大学学报 , 1996 ( 1 ): 72 - 75 .

QIN Z G , LIU J D . Finite automata of security system [J ] . Journal of University of Electronic Science and Technology of China , 1996 ( 1 ): 72 - 75 .

郭威 , 邬江兴 , 张帆 , 等 . 基于自动机理论的网络攻防模型与安全性能分析 [J ] . 信息安全学报 , 2016 , 1 ( 4 ): 29 - 39 .

GUO W , WU J X , ZHANG F , et al . A cyberspace attack and de-fense model with security performance analysis based on automata theory [J ] . Journal of Cyber Security , 2016 , 1 ( 4 ): 29 - 39 .

张峰 , 秦志光 . 基于有限自动机的网络攻击系统研究 [J ] . 计算机科学 , 2002 , 29 ( z1 ): 160 - 162 .

ZHANG F , QIN Z G . Research on network attack system based on finite automata [J ] . Computer Science , 2002 , 29 ( z1 ): 160 - 162 .

彭文灵 , 王丽娜 , 张焕国 . 基于有限自动机的网络入侵容忍系统研究 [J ] . 小型微型计算机系统 , 2005 , 26 ( 8 ): 1296 - 1300 .

PENG W L , WANG L N , ZHANG H G . Research on network in-trusion tolerance system based on finite automata [J ] . Journal of Chinese Computer Systems , 2005 , 26 ( 8 ): 1296 - 1300 .

HAN Y , LU W , XU S . Characterizing the power of moving target defense via cyber epidemic dynamics [C ] // The 2014 Symposium and Bootcamp on the Science of Security . 2014 :10.

浏览量

4138

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

面向时延敏感的TRDP安全防护机制

面向软件定义晶上系统的安全多维互连网络

工业互联网蜜网技术综述

高效安全的软件定义网络拓扑发现协议

基于模型相似度的模型恶意代码夹带检测方法