基于Bio-PEPA的光纤网络安全态势动态计算系统

Bio-PEPA-based optical fiber network security situation dynamic calculation system

光纤网络安全态势动态计算时,以往使用的系统在状态激增的情况下,极易受到攻击破坏,系统的脆弱性比较高。为此,提出基于Bio-PEPA的光纤网络安全态势动态计算系统。在硬件设计上,采用以传感器为主,分析器与决策器为辅的连接结构,针对态势数据源的不同,设计多源传感器,通过传感器将态势数据传输到上层应用;在软件设计上,利用Bio-PEPA建立光纤网络形式化模型,根据上传的态势事件性质的不同,确定并量化态势指标,结合模型中的观测值,实现光纤网络安全态势动态计算。至此,系统设计完成。测试结果表明:设计系统在状态激增的情况下,稳态概率值变化范围在0.05~0.5之间,并且动态计算时间组件数量为9 000时仅需要2.663 s。说明所提方法对于光纤网络安全态势动态计算的研究有一定的参考价值。

During the dynamic computing of fiber network security posture, the system used in the past is highly susceptible to attack and damage in the case of state surge, and the vulnerability of the system is relatively high. To this end, the Bio-PEPA-based fiber optic network security posture dynamic computing system is proposed. In the hardware design, the sensor-based connection structure is adopted, and the analyzer and the decision maker are supplemented. According to the different situation data sources, multi-source sensors are designed, and the situation data is uploaded to the upper application through the sensor;in the software design, use Bio-PEPA establishes a formal optical fiber network model, determines and quantifies the situation indicators according to the different nature of the uploaded situation events, and combines the observations in the model to realize the dynamic calculation of the optical fiber network security situation. At this point, the system design is complete. The test results show that under the condition of state surge, the variation range of steady-state probability value is between 0. 05 and 0. 5, and only 2. 663 s is required when the number of dynamic calculation time components is 9 000. It shows that the proposed method has a certain reference value for the research of dynamic calculation of optical fiber network security situation.