摘要
针对日益普遍和多样的网络攻击和破坏行为,如何利用模拟真实网络的虚拟环境,实现对网络各种攻防过程的实验推演,并分析评价网络系统安全性,已逐渐成为热点研究方向.对此文中提出了采用随机博弈模型的网络攻防实验整体架构,提出了由网络连接关系、脆弱性信息等输入数据到网络攻防博弈模型的快速建模方法,基于最终生成的攻防模型可以对目标网络的攻击成功率、平均攻击时间、脆弱节点以及潜在攻击路径等方面进行安全分析与评价.最后,应用研究所得的网络攻防模型与分析方法对一个典型的企业网络攻防过程进行分析和推演.结果表明了模型和分析方法的有效性.
Network ranges can be provided for network attack and defense experiments to simulate real network in a virtual environment, and deduct the process of network threats. This paper presents an overall framework of the network range based on security attack and defense model. In the model, the stochastic models and game model are used, and a series of security attack and defense model algorithm and the security analysis techniques are proposed. Finally, the application of network attack and defense modeling approach on a typical enterprise network attack and defense process of analysis and inference. The results show that the model and analysis approach above proposed is feasible and effective.
出处
《计算机学报》
EI
CSCD
北大核心
2010年第9期1748-1762,共15页
Chinese Journal of Computers
基金
国家自然科学基金(60803123
60933005
60932003
60873245)资助~~
关键词
网络安全
攻防模型
脆弱性
随机PETRI网
随机博弈网
network security
attack-defense Model
vulnerabilityl stochastic Petri nets
stochastic game nets
