基于Petri网的网络安全防御体系评估模型的研究

发布时间：2018-06-24 09:12

本文选题：网络安全防御 + 组合强度　；参考：《湖南大学》2014年硕士论文

【摘要】：随着人们对Internet网络的访问日益增加，网络的安全性对人们十分重要，如何对网络安全的评估是一个重要的研究课题。目前对于网络安全评估仍然有许多不足。传统风险评估的方法大部分为静态的，往往是对各安全防御组件进行单独的评估，然后把评估结果简单的叠加得出整个网络安全评估结论，，很少考虑整个网络系统结构以及网络安全设备（组件）之间内在的联系对网络安全防御的贡献，实际上网络安全组件之间复杂逻辑关系对整个网络体系的防御能力具有重要影响。（1）对网络安全体系的背景及相关技术进行研究。分析了网络安全的一些安全技术，研究了目前信息网络系统的防御体系，介绍了petri网的产生、定义、性质及扩展，为后面petri网络安全防御体系评估模型提供基础。（2）通过对组件组合串并联强度分析，同时结合petri网的特点，提出了一种基于petri网的网络安全防御体系评估模型。（3）对提出的评估模型进行了仿真实验，验证了方法的有效性。通过蒙特卡罗算法模拟建模的过程，对基于petri网的网络安全防御体系评估模型和传统的P2P网络体系进行安全性方面的对比。本文的主要创新点在于充分的考虑了各防御层次和防御部件之间的因素对网络防御功能的作用，提出了一个更接近现实网络防御功能的模型,最后用petri进行分析建模且对模型进行了证明。由于访问路径生成的过程中充分考虑现实网络拓扑结构与防御部件的配备，可以避免在某些部分过度防御而另一部分防御不足,因此对网络安全规划具有现实意义和指导意义。
[Abstract]:With the increasing access to the Internet, the security of the network is very important to people, how to evaluate the network security is an important research topic. At present, there are still many shortcomings in network security assessment. Most of the traditional risk assessment methods are static, and they usually evaluate each security defense component separately, and then simply stack the evaluation results to get the whole network security evaluation conclusions. Little consideration is given to the contribution of the entire network system architecture and the inherent link between the network security devices (components) to the network security defense, In fact, the complex logic relationship between the network security components has an important impact on the defense capability of the entire network architecture. (1) the background and related technologies of the network security system are studied. This paper analyzes some security technologies of network security, studies the current defense system of information network system, and introduces the generation, definition, nature and extension of petri network. It provides the basis for the evaluation model of petri network security defense system. (2) by analyzing the strength of component combination, series-parallel connection, and combining the characteristics of petri net, A network security defense system evaluation model based on petri net is proposed. (3) the proposed evaluation model is simulated to verify the effectiveness of the method. Through Monte Carlo algorithm simulation modeling process, the network security defense system evaluation model based on petri net and the traditional P2P network system are compared in security aspects. The main innovation of this paper is to fully consider the effects of various defense levels and defense components on the network defense function, and put forward a model which is closer to the real network defense function. Finally, petri is used to model and prove the model. Due to the consideration of the real network topology and the equipment of defense components in the process of access path generation, it can avoid over-defense in some parts and inadequate defense in others, so it has practical significance and guiding significance for network security planning.
【学位授予单位】：湖南大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【参考文献】