摘要
近几年以APT为代表的网络攻击危害日趋严重,现有的基于信号博弈理论的研究虽然可以在一定程度上模拟APT攻防过程,但忽略了攻防过程中双方收益不对等的现象以及多阶段的对抗过程,导致模型和方法缺乏普适性。为此提出一个基于非零和信号博弈的主动防御模型,依据信号博弈理论,结合分析网络攻防多阶段的对抗过程建立攻防博弈树;收益量化过程中基于收益不对等的情况,采用非零和方法与贴现因子对攻防过程中多阶段的收益情况进行建模;提出了符合网络攻防特征的量化方法,并通过分析模型中存在的纳什均衡和精炼贝叶斯均衡,得出当前最优防御策略算法。通过仿真实验对该模型和方法进行验证,结果证实了所提模型和方法的可行性和有效性。
In recent years,the damages of network attacks such as launched by APT has become more and more serious.Although existing studies based on signal game theory could simulate the APT attack and defense process to a certain extent,they ignored the phenomenon of unequal benefits between the two sides in the process of attack and defense and the multi-stage confrontation process,resulting in the lack of universality of the model and method.In this paper,a proactive defense model based on non-zero-sum signal game was proposed.First of all,the attack and defense game tree was built based on the signal game theory and the analysis of network attack and defense multi-stage confrontation process.Secondly,the non-zero-sum method and discount factor were used to build the multi-stage income of model in the process of offensive and defensive based on the situation of unequal income.On this basis,a quantitative method was proposed for network attack and defense characteristics,and the current optimal defense strategy algorithm was obtained based on the Nash equilibrium and refined Bayesian equilibrium existing in the analysis model.Finally,the model and method were verified by simulation experiments.The results showed the feasibility and effectiveness of the proposed model and method.
作者
黄万伟
袁博
王苏南
张校辉
HUANG Wanwei;YUAN Bo;WANG Sunan;ZHANG Xiaohui(College of Software Engineering,Zhengzhou University of Light Industry,Zhengzhou 450001,China;School of Electronic and Communication Engineering,Shen Zhen Polytechnic,Shenzhen 518005,China;Henan Xin′an Communication Technology Co.,Ltd.,Zhengzhou 450001,China)
出处
《郑州大学学报（工学版）》
CAS
北大核心
2022年第1期90-96,共7页
Journal of Zhengzhou University（Engineering Science）
基金
河南省高等学校重点科研项目(20B520039)。
关键词
非零和
信号博弈
贴现因子
最优防御策略
non-zero-sum
signal game
discount factor
optimal defense strategy
