基于网络服务状态分析的安全态势定量感知方法.pdfVIP

33 2 Vol . 33 No . 2 2009 4 J OU RNAL OF BEIJ ING JIA OT ON G U N IV ERSIT Y A pr. 2009 : 2009) 020 10 305 梁 颖, 王慧强, 刘 磊 ( , 15000 1) : 针对网络安全状况量化分析难的现状, 运用博弈论开展基于 响模型的网络安全态势定量 感知方法研究. 该方法将网络服务状态作为基本态势要素, 综合考虑网络系统中存在的攻防行为, 建立了网络安全态势博弈模型, 并对状态空间策略集和效用函数等模型参数给出了明确定义, 经 仿真实验找到该模型的N ash 均衡解, 在均衡局势下攻防双方达到收益平衡, 完成了对网络安全态 势的定量刻画. 研究表明, 该方法无需考虑攻击行为细节, 具有效率高实时性较强等特点, 全面完 成了对网络安全态势的量化分析, 为安全管理员正确决策提供支持. : 网络安全; 态势感知; 博弈论; 网络服务状态; N ash 均衡 : T P 393. 08 : A Method of Quantifying Network Security Situational Awareness Based on Analysis of Network Service States L IA N G Ying , WA N G H uiqiang , L I U L ei ( Colleg e of Compu er Science and T echnology, Harbin Engineering U niversi y, Harbin 150001, China) Abstract:A iming a he ac uali y ha ne work securi y was hard o be quan ified, g ambling heory was adop ed in research on quan ifica ion of ne w ork securi y si ua ional awareness based on impac model. N e w ork service s a es w ere regarded as basic si ua ional elemen s, ne w ork off ense and defense behav iors were bo h aken in o accoun , gambling model for ne w ork securi y si ua ion w as cons ruc ed , in w hich he model parame ers such as s a e space, s ra egy se and payof f func ion were defini ely f or mula ed. By simula ion ex perimen , he N ash equilibriums w as compu ed w hen a ackers and defend ers g o a balance be w een payoffs, hen quan i a ive depic of ne work securi y si ua ion w as accom plished. Research show n his me hod has shielded de ails abou a acks, and i is eff icien and real- ime, quan i a ive analysis of com prehensiv