基于随机Petri网模型的降质服务攻防效果评估.pdfVIP

基于随机Petri 网模型的降质服务攻防效果评估 施江勇，鲜明，王会梅，刘建 ( 国防科学技术大学电子信息系统复杂电磁环境效应国家重点实验室，长沙，410073) 摘 要 针对DoS 攻击的弱点，降质服务攻击（RoQ）利用网络或终端系统常见的自适应机制中存在的安全漏洞，通过间 歇性地发送高强度攻击脉冲，降低受害者端的服务性能。RoQ 攻击的隐蔽性更强，攻击效率更高，同时也给其检测和评 估提出了挑战。分析了目前针对RoQ 攻击的防范措施，主要有修改协议、攻击流特征检测以及自适应检测修复等。通过 构建RoQ 攻防的随机Petri 网模型，使用SPNP 软件仿真得出了服务质量随着攻防博弈过程的变化情况，从而对不同防范 措施的效果进行评估，为网络战攻防决策提供了一些参考。 关键词 随机Petri 网，降质服务攻击，RoQ，攻防博弈，效果评估 RoQ Defense Effect Evaluations Based on SPN Model Shi Jiang-yong, Xian Ming , Wang Hui-mei, Liu Jian (State Key Laboratory of Complex Electromagnetic Environment Effects on Electronics and Information System, National University of Defense Technology, Changsha 410073,.China) Abstract To avoid the weakness of DoS attack, Reduction of Quality Attacks(RoQ) utilize the security vulnerabilities in self-adaptive mechanism of network and terminal system by sending high strength pulse intermittently, thus reducing the service quality of victims. RoQ attacks are more elusive and efficient which brings challenges to its detection and evaluation. Right now the defense technologies to RoQ attacks mainly include mending protocol, detection of attack flows’ features, self-adaptive detection and repairmen, and so on. This paper builds a Stochastic Petri Net(SPN) and uses it in SPNP software to simulate the service quality changes in the process of attack and defense game. By evaluating the effects of different defense ways, this paper offers some consultancy for decision-makings in cyber defense activities. Keywords SPN, RoQ, Attack and defense game, Effect evaluation 合起来，用于分析和评估降质服务攻防的效果。通过随机 1 引言 Petri 网搭建降质服务攻防的模型，通过设置模型的相关 参数，使用SPNP 软件仿真得出了服务质量随着攻防博弈 近年来，随着对DoS 攻