基于最优攻击路径的网络安全增强策略研究

计算机科学 ›› 2013, Vol. 40 ›› Issue (4): 152-154.

基于最优攻击路径的网络安全增强策略研究

李庆朋,王布宏,王晓东,张春明

空军工程大学信息与导航学院西安710077;空军工程大学信息与导航学院西安710077;空军工程大学信息与导航学院西安710077;空军西安飞行学院西安710077

出版日期:2018-11-16 发布日期:2018-11-16
基金资助:
本文受陕西省自然科学基金(2010JM8004)资助

Approach on Network Security Enhancement Strategies Based on Optimal Attack Path

LI Qing-peng,WANG Bu-hong,WANG Xiao-dong and ZHANG Chun-ming

Online:2018-11-16 Published:2018-11-16

摘要/Abstract

摘要： 为实现目标网络的适度安全,提出了一种基于最优攻击路径的网络安全增强策略制定方法。该方法对攻击目标进行风险评估,在分析攻击图最优攻击路径的基础上制定安全增强策略。为了获取最优攻击路径,提出了一种基于蚁群优化算法的最优攻击路径生成方法,并改进了信息素更新方式。仿真实验表明,所提方法能够有效地产生安全策略集,改进后的蚁群算法具有较强的全局搜索能力和更好的收敛性。

关键词: 攻击图,蚁群优化算法,最优攻击路径,网络安全

Abstract: To reach the proportional security of the goal network,an approach on network security enhancement strategies based on optimal attack path was proposed．The approach assesses the risk of attack target,and makes strategies for network security enhancement on the basis of optimal attack path．To obtain optimal attack path,an approach to generating optimal attack path based on ant colony optimization algorithm was proposed,and the pheromone updating way was improved．Simulation results show that the proposed approach can generate strategies effectively,and the improved ant colony optimization algorithm has strong global search ability and rapid convergence.

Key words: Attack graphs,Ant colony optimization,Optimal attack path,Network security

李庆朋,王布宏,王晓东,张春明. 基于最优攻击路径的网络安全增强策略研究[J]. 计算机科学, 2013, 40(4): 152-154. https://doi.org/

LI Qing-peng,WANG Bu-hong,WANG Xiao-dong and ZHANG Chun-ming. Approach on Network Security Enhancement Strategies Based on Optimal Attack Path[J]. Computer Science, 2013, 40(4): 152-154. https://doi.org/

参考文献

[1] 陈锋,张怡,苏金树,等．攻击图的两种形式化分析[J]．软件学报,2010,1(4):838-848
[2] 司加全,张冰,苘大鹏,等．基于攻击图的网络安全性增强策略制定方法[J]．通信学报,2009,0(2):123-128
[3] Sheyner O,Haines J,Jha S．Automated generation and analysis of attack graphs[C]∥Proc 2002IEEE Symposium on Security and Privacy．Oakland,California,USA,2002:254-265
[4] Jha S,Sheyner O,Wing J．Two Formal Analyses of AttackGraphs[C]∥Proceedings of the 15th IEEE Computer Security
[5] Colorni A,Dorigo M,Maniezzo V．Distributed optimization by ant colonies[C]∥Varela F,Bourgine P.Proc of the ECAL’91European Conf of Artificial Life.Paris:Elsevier,1991:134-144
[6] 杜占玮,杨永健,孙永雄,等．基于互信息的混合蚁群算法及其在旅行商问题上的应用[J]．东南大学学报:自然科学版,2011,1(3):478-481
[7] 李琳,刘士新,康加福．改进的蚁群算法求解带时间窗的车辆路径问题[J]．控制与决策,2010,5(9):1379-1383
[8] 胡耀民,刘伟铭．基于改进型蚁群算法的最优路径问题求解[J]．华南理工大学学报:自然科学版,2010,8(10):105-110
[9] 汪立东.操作系统安全评估和审计增强[D].哈尔滨:哈尔滨工业大学计算机科学与技术学院,2002
[10] 彭俊好,徐国爱,杨义先,等．基于效用的安全风险度量模型[J]．北京邮电大学学报,2006,29(2):6-9

Metrics

Viewed

Full text

Abstract

Cited

Shared

Discussed