基于状态攻防图模型的网络安全防御策略生成方法

发布时间：2018-03-24 19:08

本文选题：状态攻防图　切入点：防御策略　出处：《计算机应用》2013年S1期

【摘要】：为了减少网络的安全风险,针对网络攻击层面的风险管理需求,从攻击者和防御者的角度设计了一种网络安全防御策略生成方法。该方法根据网络的拓扑信息、节点的可达关系和脆弱性信息,生成网络状态攻防图,进一步计算状态攻防图中各原子攻击成功的概率和危害指数,从而得出所有可能的成功攻击路径概率和危害指数;再结合脆弱点的防控措施,生成防御策略。并通过一个典型的网络实例分析了该方法在网络安全主动防御中的应用,同时验证了其可行性和有效性。
[Abstract]:In order to reduce the security risk of the network, aiming at the risk management requirement of the network attack level, this paper designs a method to generate the network security defense policy from the point of view of the attacker and the defender. The method is based on the topology information of the network. The reachability relation and vulnerability information of nodes are obtained, and the attack and defense map of network state is generated, and the probability and damage index of each atom attack in the state attack map are further calculated, and the probability of all possible successful attack paths and the damage index are obtained. A typical network example is given to analyze the application of this method in active defense of network security, and the feasibility and effectiveness of the method are verified.
【作者单位】：南京理工大学计算机科学与工程学院;
【基金】：国家自然科学基金资助项目(60903027) 江苏省自然科学重大研究项目(BK2011023) 江苏省自然科学基金资助项目(BK2011370) 航天创新基金资助项目(CALT201102) 连云港工业攻关科技项目(CG1124) 中国博士后基金资助项目(2012M521089)
【分类号】：TP393.08

【参考文献】