摘要
网络系统的安全是影响系统运作的核心问题,一般将系统的不安全事件转化为独立的病变元诱因进行分析,然后借助有效的治疗策略来保障系统的安全.对元诱因实施治疗,首先利用元诱因属性来构建诱因函数和治疗函数,并结合治疗概率矩阵和状态转移中的不安全熵及效益变化趋势建立数学模型;其次利用剔除劣势策略的原理寻找最佳策略组合,以此来实现对系统安全经络图的有效控制;最后在元诱因治疗的数学模型基础上,探究元诱因治疗的执行思路和策略路径,并根据治疗模型进行模拟仿真和分析.结果表明,基于不安全熵和效益计算的元诱因治疗模型具有实用可行的特点.
The security of network system is one of the core problems that affect the operation of the system.Generally speaking,the security events of the system are transformed into independent pathological factors for analysis,and then effective treatment strategies are adopted to ensure the security of the system.For the treatment of meta-inducement,firstly,the inducement function and treatment function are constructed by using the meta-inducement attribute,and a mathematical model is established by combining the probability benefit matrix and the trend of unsafe entropy and benefit in the state transition.Secondly,the principle of eliminating disadvantage strategy is used to find the best combination of strategies,so as to realize the effective control of system security meridian diagram.Finally,based on the mathematical model of meta-inducement therapy,the execution thoughts and strategies of meta-inducement therapy are explored,and the simulation and analysis are carried out according to the treatment model.The results show that the meta-incentive treatment model based on the calculation of unsafe entropy and benefit is practical and feasible.
作者
汤卫
陈玉玲
杨义先
钮心忻
TANG Wei;CHEN Yu-Ling;YANG Yi-Xian;NIU Xin-Xin(School of Mathematics and Statistics,Guizhou University,Guiyang 550025,China;State Key Laboratory of Public Big Date(Guizhou University),Guiyang 550025,China;College of Computer Science and Technology,Guizhou University,Guiyang 550025,China;School of Cyberspace Security,Beijing University of Posts and Telecommunications,Beijing 100876,China)
出处
《密码学报》
CSCD
2020年第4期498-510,共13页
Journal of Cryptologic Research
基金
贵州省科技重大专项计划(20183001)
贵州省公共大数据重点实验室开放课题(2018BDKFJJ005,2018BDKFJJ013)
贵州省大数据产业发展应用研究院、贵州省公共大数据重点实验室人才引进科研项目(研究院青年基金[2018]01号(自然科学))。
关键词
元诱因
概率效益矩阵
治疗策略
不安全熵
期望收益
meta-inducement
probability benefit matrix
treatment strategies
unsafe entropy
expected return