基于对象Petri网的信任攻击建模与分析

Modeling and Analysis of Trust Attack Based on Object-oriented Petri Net

在信任攻击图的基础上,提出了一种面向对象的信任攻击Petri网模型,该模型动态描述了攻击者在信任主体对象部件间的攻击行为。通过引入对象Petri网,使信任主体对象和部件间的信任攻击关系在Petri网中展现,从而模拟仿真了部件间协同工作的场景;根据重新编写的信任关系重建规则,提出了信任攻击路径推理算法,使攻击者在进行攻击的同时掌握攻击部件的危害度变化,从而决定进攻方向,找出到达攻击目标的最大威胁度攻击路径。最后用实例验证了该模型能够动态描述信任主体对象部件间的攻击关系,并准确找到信任环境中的信任攻击路径。

On the basis of trust attack graph, the object-oriented trust attack Petri net model was put forward, the dynamic model described the attack behaviors among components of trust entity object. By introducing the object Petri net, the trust attack relations between trust entity objects and components were shown in the Petri net, simulating the collaborative work between the components. According to the new trust relation reconstruction rules, a trust attacker knowing the changes of harmfulness attack path inference algorithm was proposed to make the when attacking the components, thus the attacker could decide the attack direction. The maximal threat path which could arrive at an attack goal could be searched out. An experiment shows that the model can describe the dynamic trust entity object attack relations between components, and accurately find the trust attack nnth in the trust environment.