| 要約: | Network security problems occur frequently in the current complex environment,but the existing network defense model based on attack-defense game does not consider the single-point and multi-step characteristics of network attacks,so it can not effectively carry out network defense.According to the actual needs of network attack and defense,this paper proposes a defense strategy selection method based on Single-Point Multi-Step Network Attack-Defense Game(SMNADG) model by simulating the attack-defense environment and process.A single-point multi-step attack-defense game model is established,which reduces the global game to the local game on vulnerability to adapt to a variety of defense systems attack-defense game analysis.The vulnerability scoring system is used to quantify the effectiveness of attack-defense game,and reduce the evaluation subjectivity.Based on attack graph theory,the vulnerability connectivity graph and vulnerability adjacency matrix model are constructed to analyze attack-defense decision-making attack graph.On this basis,the optimal defense strategy selection method is designed,and verified by typical attack-defense scenarios. Experimental results show that the mixed strategy Nash equilibrium of single-point game adopted by the proposed method has probability independence,which is suitable for large-scale network attack-defense game analysis.
|
|---|
