采用可交互信任值机制的病毒传播抑制策略

Suppression Strategy Against Network Virus Propagation Based on Interactable Trust Value Mechanism

为了更加精准地抑制病毒传播,提出了采用可交互信任值机制的病毒传播抑制策略。改进了信任值模型,提出了可交互信任值机制,主要改进措施包括:①为便于数据处理和交互,采用离散信任值;②结合病毒传播免疫机理和直接信任模型,借鉴TCP拥塞控制算法,设计了直接信任值更新算法,实现了对感染信息的初步处理和信任值的恢复;③结合间接信任模型,借鉴RIP路由协议,设计了信任值交互算法,通过节点间共享信任值,实现对感染信息的进一步利用。提出了采用可交互信任值机制的病毒传播抑制策略:节点以信任值为依据判定自身所处安全环境,自主决定中断链路的范围;根据网络新增感染节点数量,自适应地调整信任阈值及不可信链路中断比例参数,实现了链路中断范围随网络安全动态调节。仿真结果表明:在所提参数条件下,通过信任值交互,漏检率下降6%以上,最低信任值处正确率提高了1倍,较高信任值处正确率基本不变,使得正确率关于信任值的曲线由上凸变为下凹,综合作用使得信任值较低处的不可信链路密度更高;在病毒防御过程中,所提策略中断链路比例的最高值仅为随机链路中断策略平均值的63%,不计感染节点清零后的部分,所提策略中断链路的总数为随机链路中断策略的21%。

To suppress virus propagation more accurately,a suppression strategy against virus propagation based on interactable trust value mechanism is proposed,and an interactable trust value mechanism is introduced to improve trust value model.The main improvement measures include:1)To facilitate data processing and interaction,discrete trust value is adopted;2)Combined with the immune mechanism of virus propagation and the direct trust model,the direct trust value update algorithm is designed via referencing to TCP congestion control algorithm,so the preliminary processing of infection information and the trust restoration are realized;3)Following the indirect trust model and RIP routing protocol,a trust value interaction algorithm is designed to further utilize the infection information by sharing the trust value between nodes.Based on interactable trust value mechanism,a virus propagation suppression strategy is put forward,where the node determines its own safe environment based on the trust value and independently decides the range of interrupt link.According to the number of newly infected nodes in the network,the threshold of trust and the ratio of untrusted link interruptions are adjusted adaptively.The range of link interruptions is dynamically adjusted according to network security.Simulation results show that under the condition of parameters here,the interaction of trust values enables to lower miss rate by more than 60%,and heighten accuracy by 1 times at minimum trust value,but the accuracy remains unchanged at maximum trust value,which makes the trust value curve from convex to concave.It is found that unreliable link density is higher at low trust values,and in the process of virus defense,the maximum interrupted link ratio of the proposed strategy is only 63%of the average value of the random link interrupt strategy.The total number of the interrupted links of the proposed scheme is 21%of the random links interrupt strategy without considering the part after completely eliminating the infected nodes.