基于排队网的入侵响应系统可生存性

Survivability analysis of intrusion response system based on queuing nets

入侵响应是提高系统可生存性的主要措施,入侵响应系统自身的生存能力至关重要。提出了一个基于排队网的入侵响应系统生存性分析模型,并将其转化为对应的二维Markov模型,通过拟生灭过程(QBD)的构造实现了模型的化简,使用频谱扩展法求出了模型的稳态概率分布。最后,在此基础上分别从阻塞概率和平均队长2个方面来量化入侵响应系统的可生存性。量化结果不仅可以用来检验系统的设计是否符合生存性要求,也可为系统结构和系统参数的优化调整提供依据。

Intrusion response is a key measure of system survivability and the survivability of intrusion response system is critical.A survivability analysis model was developed using queuing nets transformed into a two-dimension Markov model and simplified into a quasi birth and death（QBD） process.The steady-state distribution is obtained based on the spectral expansion method.The blocking probability and the mean queue length of the intrusion response model are calculated to quantify the survivability of the intrusion response system.The results are useful not only for determining whether the survivability requirements are satisfied but also for optimizing the system structure and parameters.