Network Security Assessment Based on Triangular Fuzzy Matrix Game

doi:10.7652/xjtuxb201308009

您当前的位置：

首页 >

文章列表页 >

Network Security Assessment Based on Triangular Fuzzy Matrix Game

更新时间：2025-05-08

- Network Security Assessment Based on Triangular Fuzzy Matrix Game
- Vol. 47, Issue 8, Pages: 49-53(2013)
- 作者机构：
  
  解放军信息工程大学数学工程与先进计算国家重点实验室,郑州,450002
- 作者简介：
- 基金信息：
- DOI：10.7652/xjtuxb201308009
  CLC： TP301
- Online First：10 August 2013，
  
  Published：2013
- 稿件说明：
移动端阅览
Network Security Assessment Based on Triangular Fuzzy Matrix Game[J]. 2013, 47(8): 49-53.
DOI：

Network Security Assessment Based on Triangular Fuzzy Matrix Game[J]. 2013, 47(8): 49-53. DOI： 10.7652/xjtuxb201308009.

摘要

针对网络攻防双方在攻防博弈分析中无法对双方的损益情况做出准确判断的问题

将三角模糊数的概念引入到博弈模型

用三角模糊数来表示难以用精确数值表示的攻防双方各策略的损益值

并且提出了基于三角模糊矩阵的博弈算法。通过算法复杂度分析

证明了整个算法的时间复杂度可以满足网络安全评估的需求。实例表明

基于该算法生成的策略可以保证攻击者的最低收益为14.44

而对于防御系统

最优的防御是采取安装软件升级补丁的策略

这样可以大大加强主机系统的安全性。与传统的基于博弈论的安全评估方法相比

引入三角模糊概念更加符合实际应用情况

提高了评估结果的准确性和有效性。

Abstract

The concept of triangular fuzzy number is introduced into the game model to solve the problem of cannot making accurate judgments on both offense and defense payoffs in game analysis. The payoffs

which are difficult to be described with accurate numbers

are expressed with triangular fuzzy numbers

and the game algorithm based on triangular fuzzy matrix is thus proposed. The complexity analysis verifies the time complexity to meet the requirements of network security assessment. The strategy based on the algorithm can ensure the minimum income of attacker to approach to 14.44; and for the defense system

the best defense strategy that greatly enhances the host system security is to adopt Install Patches. Compared with the traditional security assessments following game theory

introducing the concept of the triangular fuzzy number facilitates suiting the applications and improving the accuracy and validity of assessments.

关键词

Keywords

references

SCHNEIER B. Attack trees [J]. Dr. Dobb' Journal, 1999,24(12):21-29.

吴金宇,金舒原,杨智. 基于网络流的攻击图分析方法 [J]. 计算机研究与发展, 2011,48(8):1497-1505.

WU Jinyu, JIN Shuyuan, YANG Zhi. Analysis of attack graphs based on network flow method [J]. Journal of Computer Research and Development, 2011,48(8):1497-1505.

冯萍慧,连一峰,戴英侠,等.面向网络系统的脆弱性利用成本估算模型 [J]. 计算机学报, 2006,29(8):1375-1381.

FENG Pinghui, LIAN Yifeng, DAI Yingxia, et al. An evaluation model of vulnerability exploitation cost for network system [J]. Chinese Journal of Computers, 2006,29(8):1375-1381.

陈锋,刘德辉,张怡,等. 基于威胁传播模型的层次化网络安全评估方法 [J]. 计算机研究与发展, 2011,48(6):945-954.

CHEN Feng, LIU Dehui, ZHANG Yi, et al. A hierarchical evaluation approach for network security based on threat spread model [J]. Journal of Computer Research and Development, 2011,48(6):945-954.

LYE K, WING J M. Game strategies in network security [J]. International Journal of Information Security, 2005,4(1):71-86.

XU J, LEE W. Sustaining availability of Web services under distributed denial of service attacks [J]. IEEE Transactions on Computers, 2003,52(4):195-208.

姜伟,方滨兴,田志宏,等. 基于攻防博弈模型的网络安全评测和最优主动防御 [J]. 计算机学报, 2009,32(4):817-827.

JIANG Wei, FANG Binxing, TIAN Zhihong, et al. Evaluating network security and optimal active defense based on attack-defense game model [J]. Chinese Journal of Computers, 2009,32(4):817-827.

林旺群,王慧,刘家红,等. 基于非合作动态博弈的网络安全主动防御技术研究 [J]. 计算机研究与发展, 2011,48(2):306-316.

LIN Wangqun, WANG Hui, LIU Jiahong, et al. Research on active defense technology in network security based on non-cooperative dynamic game theory [J]. Journal of Computer Research and Development, 2011,48(2):306-316.

吴诗辉,杨建军,郭乃林. 三角模糊矩阵博弈的最优策略研究 [J]. 系统工程与电子技术, 2009,31(5):1231-1234.

WU Shihui, YANG Jianjun, GUO Nailin. Study on the optimal strategies solution of triangular fuzzy matrix game [J]. Systems Engineering and Electronics, 2009,31(5):1231-1234.

汪贤裕. 博弈论及其应用 [M]. 北京:科学出版社, 2008:60-68.

肖钰,李华. 基于三角模糊数的判断矩阵的改进及其应用 [J]. 模糊系统与数学, 2003,17(2):59-64.

XIAO Yu, LI Hua. Improvement on judgement matrix based on triangle fuzzy number [J]. Fuzzy Systems and Mathematics, 2003,17(2):59-64.

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Stratified Analysis of Network Flows and Its Application to Early Detection of Internet Worms

Detecting Domain Flux Through Patterns of Domain Names' Alphanumeric Characters and Querying Behavior of Hosts

A New Approach of IP Traceback with Multiple Marking Tags for DoS Attacks

Research on the Electrohydrodynamic Effects of Ionic Liquid-Modified Fuels

I/O Performance Modeling and Prediction Method for Large-Scale Parallel Applications Using Machine Learning

Related Author

蔡忠闽 1

秦涛 1

张永斌

陆寅

张艳宁

陈秀真 1

Related Institution

MOE Key Laboratory of Intelligent Network and Network Security, Xi'an Jiaotong University

State Key Laboratory of Manufacturing Systems Engineering, Xi'an Jiaotong University

School of Computer Science, Northwestern Polytechnical University

State Key Laboratory for Manufacturing Systems Engineering, Xi'an Jiaotong University

School of Information Security Engineering, Shanghai Jiaotong University

⁰