威胁驱动的指挥信息系统韧性评估试验方法

Resilient Evaluation and Experiment Method for Threat-Driven Command Information System

针对复杂赛博威胁环境对指挥信息系统的韧性能力的挑战,提出了一种威胁驱动的指挥信息系统韧性能力评估试验方法。首先,从系统韧性试验任务、试验内容规划、试验环境部署生成及试验运行与评估4个方面,建立了韧性试验运行框架;然后,分析了系统面临的内部/外部赛博威胁,提出了基于规则的外部威胁模拟、基于业务数据变异的内部威胁模拟方法;最后,以持续保障战场态势处理任务为案例,从持续保障核心任务完成角度,选择任务完成波动率及任务完成率等指标,开展不同威胁下态势处理任务保障能力试验,验证了该方法有效性。

Aimed at the challenge of resilience capability for command information system in the complex cyber threat environment,the resilient evaluation and experiment method for threat-driven command information system is proposed.Firstly,the resilient experiment running framework is established from four aspects of the system resilient experiment task,the resilient experiment content planning,the experiment environment deployment and generation,and the experiment operation and evaluation.Then,the interval/external cyber threats to the system are analyzed,an external threat simulating method rule-based and an interval threat simulating method mutation-based are proposed.Finally,taking the battlefield situation processed mission of sustained guaranteed as an example,from the perspective of the completion of the core task of continuous support,the task completion volatility and task completion rate and other indicators are selected,and the situation processing mission guarantee capability test under the different threats is developed to verify the effectiveness of this method.