摘要
针对当前网络安全预警响应决策模型缺乏主动性且未引入响应时机决策机制而导致无法在最佳时机触发最优响应策略的问题,建立了基于双重动态非对称三角模糊矩阵博弈的主动预警响应决策模型.模型将双重三角模糊矩阵的第一重三角模糊数映射于网络攻防双方的响应时机,第二重三角模糊数映射于在各响应时机情况下的网络攻防双方的策略损益值,最后用改进的混沌粒子群算法求解矩阵博弈的纳什均衡,即在最佳时机响应最优预警响应策略的方案.实验结果表明:该模型生成的方案可以使攻击者在扫描、漏洞溢出、权限提升三个阶段的最低收益分别降低28.4%,11.6%和2.6%,提高了网络安全主动预警响应决策能力和效率.
An active warning response decision‐making model was proposed based on dual‐dynamic‐asymmetric triangular fuzzy matrix game to solve the problems that the current network security warning response decision‐making model was lack of initiative ,and could not touch off the optimization response strategy decision‐making at the best time caused by not introducing the response time decision‐making mechanism .This model mapped the first layer triangular fuzzy number of the dual triangular fuzzy matrix to the response time for both network attack and defense ,and mapped the second layer triangular fuzzy number to the profit and loss value of the strategy for both network attack and defense in different case of response time .Finally ,an improved chaos particle sw arm optimization algorithm was used for searching the Nash equilibrium of the matrix game ,which was the project of the optimization response decision‐making strategy at the best response time .The experiment results show that the project made by this model can reduce the lowest profit of the attacker by 28 .4% , 11 .6% and 2 .6% in separate time of scanning ,loopholes spill and jurisdiction elevation ,respectively , which improves the active warning response decision‐making ability and efficiency for network security .
出处
《华中科技大学学报(自然科学版)》
EI
CAS
CSCD
北大核心
2015年第8期92-97,共6页
Journal of Huazhong University of Science and Technology(Natural Science Edition)
基金
国家自然科学基金资助项目(61201209)
关键词
主动预警
响应决策
三角模糊
矩阵博弈
混沌粒子群
active warning
response decision-making
triangular fuzzy
matrix game
chaos particle swarm