基于CPN的信息系统安全防护能力建模方法

Modeling for Security Protection Capability of Information System Based on CPN

建模对安全防护能力评估具有重要作用。结合安全防护能力评估方法多、更新快的特点,提出了基于监测、分析和响应的安全防护能力分析框架;针对防护设备智能学习和协作交互难以建模的问题,基于CPN(Colored Petri Nets)构建了安全防护能力分析模型。模型用消息颜色集的颜色表示系统事件的不同属性;建立了监测、分析和响应三种功能组件来表示安全防护能力的不同过程;给出了模型的2个定理,分析了模型复杂度。实例应用验证了模型的有效性,模型分析得出了其良好的通用性、扩展性和可分析性,表明可为安全防护能力的评估提供数据和模型支撑。

Modeling plays an important role in assessment for security protection capability. Oriented to the features that evaluation has many methods which update quickly, the analysis frame is proposed based on detect, analyse and respond. Aimed at the problems that it is difficult to model the intelligent learning and coordination process for protective device, analysis model is built based on CPN. The colors of message color sets represent the different properties of events. Detect, analysis and respond components which represent different process of security protection capability are defined. Two theorems are proved, and model complexity is analyzed. The usability of model is verified, and excellent versatility, scalability and analyzability are reached by analyzing the application process. Results show that the model can provide data and model support for the evaluation on security protection capability.