基于元胞自动机的复杂信息系统安全风险传播研究

Complex information system security risk propagation research based on cellular automata

基于元胞自动机建立复杂信息系统安全风险传播模型,研究复杂信息系统安全风险在最近邻耦合网络、随机网络,Watts-Strogatz小世界网络和Barabasi-Albert无标度网络四种网络拓扑下的传播问题.通过研究安全风险传播模型在四种网络拓扑下安全风险的传播阈值,与现有的传播阈值研究成果进行比较,验证模型的正确性,并分析验证网络拓扑结构中度分布的异质化程度越高传播阈值越小的结论.通过对安全风险的传播演化趋势进行研究,分析验证网络度分布的异质化程度越高、安全风险影响范围越小、传播速度越快的结论,并指出度分布的异质化程度越高、模型后期的免疫机制对控制安全风险传播的效果越缓慢.通过对安全风险在传播最早期就趋于消亡的情况进行研究,分析得出安全风险在传播之初就趋于消亡的消亡率与传播率之间呈现近似负指数的关系,并且初期的感染源越多安全风险的消亡率越低.分析了影响复杂信息系统安全风险传播的关键要素,对复杂信息系统中安全风险传播的控制具有指导作用.

There models of complex information system security risk propagation are proposed in this paper based on cellular automata, and the probabilistic behaviors of security risk propagation in complex information systems are investigated by running the proposed models on nearest-neighbor coupled network, Erdos-Renyi random graph network, Watts-Strogatz small world network and Barabasi-Albert power law network respectively. Analysis and simulations show that the proposed models describe the behaviors of security risk propagation in the above four kinds of networks perfectly. By researching on the propagation threshold of security risks in four kinds of network topology and comparing with the existing research result, the correctness of the models is verified. The relationship between the heterogeneity of degree distribution and the value of the propagation threshold is analyzed and verified in this paper. Through the research on the evolutionary trends of security risk propagation, the relationship between the heterogeneity of degree distribution and the influence sphere and speed of security risk propagation is analyzed and verified as well. Meanwhile, the relationship between the heterogeneity of degree distribution and the effect of the immune mechanism on controlling security risk propagation is pointed out. Furthermore, the result of simulations describes the negative exponent relationship between security risk extinction rate and the propagation rate. The key factors affecting the security risk propagation are analyzed in this paper, providing the guidance for the control of security risk propagation in complex information systems.