基于变点检测的网络移动目标防御效能评估方法

发布时间：2018-06-04 16:51

本文选题：网络移动目标防御 + 分层网络资源图　；参考：《通信学报》2017年01期

【摘要】：提出一种基于变点检测的网络移动目标防御效能评估方法。针对网络资源图无法表示资源脆弱性对节点安全状态影响的问题,定义分层网络资源图,在建立资源脆弱性改变和节点安全状态转换关联关系的同时,提高构建和更新网络资源图的效率。针对静态检测度量无法准确度量网络移动目标防御动态改变的问题,设计变点检测和标准化度量算法,在保证度量标准统一的基础上实现对网络移动目标防御的安全成本和安全收益的实时检测和动态度量,提高评估的准确性和结果的可比性。典型实例分析证明了所提出的网络移动目标防御效能评估方法的可行性和有效性。
[Abstract]:This paper presents a method for evaluating the defense effectiveness of mobile targets based on change-point detection. Aiming at the problem that network resource graph can not express the influence of resource vulnerability on node security state, a hierarchical network resource graph is defined, which establishes the relationship between resource vulnerability change and node security state transition. Improve the efficiency of building and updating network resource maps. In order to solve the problem that static detection metric can not accurately measure the dynamic change of network moving target defense, a change point detection and standardized measurement algorithm is designed. In order to improve the accuracy of evaluation and the comparability of results, the real-time detection and dynamic measurement of security cost and security benefit of network mobile target defense are realized on the basis of unified measurement standards. Typical examples show that the proposed method is feasible and effective.
【作者单位】：信息工程大学密码工程学院;河南省信息安全重点实验室;中国科学院信息工程研究所信息安全国家重点实验室;
【基金】：国家重点基础研究发展计划(“973”计划)基金资助项目(No.2011CB311801) 国家高技术研究发展计划(“863”计划)基金资助项目(No.2012AA012704,No.2015AA016106) 郑州市科技领军人才基金资助项目(No.131PLKRC644) 中国科学院先导专项基金资助项目(No.XDA06010701)~~
【分类号】：TP393.08

【相似文献】