基于Petri网的可信连接架构的安全属性分析

Security attributes analysis of trusted connect architecture based on Petri net

为确保可信连接架构（TCA）自身的安全可靠，研究了其安全属性量化问题，分析了其双向用户身份认证和平台认证过程中存在的安全威胁。利用随机Petri网对带有攻击行为的TCA可信网络连接过程进行了建模，该模型用于描述攻击行为和TCA的双向认证过程。以该模型为基础构造了马尔科夫链，通过计算马尔科夫模型的稳定状态概率对TCA的稳定状态机密性和完整性等安全属性进行定量分析。最后给出了一个具体数值评估结果的实例。此研究给出的方法有理论和实用意义。

From the purpose of ensuring the security and reliability of the trusted connect architecture （ TCA）, the issues related to quantifying its security attributes were studied, and the security threats in its bi-directional user identity authentication and platform authentication were analyzed. The trusted network connect process under attack behav- iors was modeled as a stochastic Petri net. This model was used to describe attack behaviors and hi-directional au- thentication process in TCA. The main security attributes of confidentiality and integrity were analyzed and quantified by computing the steady state probability of a Markov model derived from the stochastic Petri net. Finally, the model analysis was illustrated in a numerical example. The method demonstrated in the study is of theoretical and practical significance.