基于攻击防御树的CPS最小防御代价计算方法

Minimum Defense Cost Calculation Method for CPS Based on Attack Defense Tree

为降低信息物理融合系统(CPS)的防御代价,提高防御措施的有效性,提出一种基于攻击防御树的CPS最小防御代价计算方法,并实现相应的计算工具。通过对攻击防御树增加约束,给出原子攻击防御树的概念。对攻击防御树进行预处理,将其转换为原子攻击防御树,采用代数方法进行最小防御代价计算。基于此,在Eclipse平台上利用Java语言实现一款最小防御代价计算软件。以某电力系统的经典案例进行实验验证,结果表明,该方法可以正确且高效地计算出攻击防御树的最小防御代价。

In order to reduce the defense cost of Cyber Physical System(CPS)and improve the effectiveness of defense measures,this paper proposes a method based on Attack Defense Tree(ADTree)to calculate the minimal defense cost of CPS and implements a calculation tool.Firstly,the concept of atom attack defense tree(A2DTree)is proposed by adding constraints to ADTree.Secondly,the ADTree is transformed into an A2DTree by preprocessing,and the minimum defense cost is calculated by using an algebraic method.On this basis,a tool for minimum defense cost calculation is designed and implemented by Java on the Eclipse platform.The effectiveness of the method is verified by an experiment based on a typical case study of a power system.Results show that the proposed method can correctly and efficiently calculate the minimum defense cost of ADTree.