基于随机Petri网的RFID系统安全性分析模型

RFID System Security Analysis Model Based on Stochastic Petri Net

针对日益频发的RFID系统攻击给RFID系统带来瘫痪风险问题,提出一种采用基于层次广义随机Petri网的RFID系统安全性分析模型。该模型利用已有的知识储备模拟真实的RFID虚拟环境,对攻击RFID系统过程进行准确有效的实验推演,并量化分析RFID系统风险。首先,利用攻击层次、攻击权限和基于权限的攻击等信息构建RFID攻击者模型;其次,对攻击者的行为进行建模描述,刻画其对RFID系统状态的影响;最后,基于所构建的模型对目标RFID系统的攻击概率、脆弱节点等方面进行风险评估。实验结果表明,本文提出模型可有效地对RFID系统进行风险评估,并且大大降低了评估时间和复杂度。

To solve the problem of RFID system breakdown risk caused by frequent RFID system attacks,this paper proposes a RFID system security analysis model based on hierarchical generalized stochastic Petri net.The model uses the existing knowl⁃edge reserve to simulate the real RFID virtual environment,accurately and effectively deduces the attack process in the RFID system,and quantifies the risk of the RFID system.Firstly,the RFID attacker model is constructed using the information of at⁃tack hierarchy,attack authority and permission-based attacks.Secondly,the description of the attacker's behavior is modeled and described its impact on the RFID system state.Finally,based on the constructed model,the attack probability,weak nodes and other aspects of the RFID system are assessed.The experimental results show that the proposed model can effectively evalu⁃ate the risk of RFID system,and greatly reduce the complexity of evaluation time.