基于有色Petri网的网络安全态势感知模型构建及分析
|
摘要
为了宏观地把握网络安全态势的状态,构建基于有色Petri网的网络安全态势感知模型,并进行了分析。针对所建立的模型利用CPN Tools对其结构进行分析和验证。经过仿真验证分析,证明所建立的模型在结构上无死锁、具有有界性和可达性且状态空间合理。
In order to grasp the state of network security situation macroscopically,a network security situation awarenessmodel based on colored Petri nets is constructed and analyzed. CPN Tools is used to analyze and validate the structure of model.Through model simulation and analysis,it is proved that the model is structurally free of deadlock,boundedness and reachability,and the state space is reasonable.
In order to grasp the state of network security situation macroscopically,a network security situation awarenessmodel based on colored Petri nets is constructed and analyzed. CPN Tools is used to analyze and validate the structure of model.Through model simulation and analysis,it is proved that the model is structurally free of deadlock,boundedness and reachability,and the state space is reasonable.
引文
[1]习近平.习近平总书记在网络安全和信息化工作座谈会上的讲话[Z].北京,2016-4-19.Xi Jinping. Speech by General Secretary Xi Jinping at theSymposium on network security and information technology[Z]. Beijing,2016-4-19.
[2]Shifflet J.A technique independent fusion model for net-work intrusion detection[C]//In:Proceedings of the Mid-states Conference on Undergraduate Research in Comput-er Science and Mathematics.2005,3(1):13-19.
[3]Glenn A.Fink,Jereme N,et al.Cooperative Cyber Defensefor Securing Critical Infrastructures[J]. ACM Trans,Inf.Syst.Secur.2005,4(03):186-205.
[4] Haack,G.Fink,E.Fulp,et al.Cooperative InfrastructureDefense[EB/OL]. http://www.vizsec.org/workshop2008/fink.pdf.2014-05-06.
[5]王宁丽,余道华.改进型有色Petri网的安全协议分析[J].安徽工业大学学报(自然科学版),2010,27(4):413-418.WANG Ningli,YU Daohua.Analysis on Improved ColoredPetri Nets of Security Protocols[J]. Journal of Anhui Uni-versity of Technology(Natural Science),2010,27(4):413-418.
[6]孔轶艳.基于Petri网的骨干网络安全风险评估分析[J].河池学院学报,2012,32(5):85-91.KONG Yiyan.Analysis of security risk assessment of back-bone network based on Petri nets[J]. Journal of Hechi uni-versity,2012,32(5):85-91.
[7]张莉,赵丽红,蒋勇,等.基于Petri网跳面节点的空间信息网可靠性评估[J].控制工程,2016,23(S0):66-72.ZHANG Li,ZHAO Lihong,JIANG Yong,et al.ReliabilityEvaluation of Space Information Network Based on PetriNet Jump Surface Nodes[J]. Control Engineering of Chi-na,2016,23(S0):66-72.
[8]侯仁平,李孝忠.基于Petri网的病毒攻击建模[J].天津科技大学学报,2014,29(1):69-74.HOU Renping,LI Xiaozhong. A Model of Virus AttacksBased on Petri Nets[J]. Journal of Tianjin University ofScience&Technology,2014,29(1):69-74.
[9]Endsley M R.Design and evaluation for situation aware-ness enhancement[C]//Proceedings of the Human Factorsand Ergonomics Society Annual Meeting.SAGE Publica-tions,1988,32(2):97-101.
[10]黄卫东,童喆,刘寅卯.基于着色Petri网的情景演化应急预案流程建模[J].信息与控制,2013,42(4):492-498.HUANG Weidong,TONG Zhe,LIU Yinmao.Modeling ofEmergency Plan Business Process under Scenario Evolu-tion Based on Colored Petri Net[J]. Information and Con-trol,2013,42(4):492-498.
[11]王景光.信息系统建模与结构复杂性[M].北京:机械工业出版社,2011:63.WANG Jingguang.Modeling and structural complexity ofinformation systems[M]. Beijing:Machinery IndustryPress,2011:63.
[12]程学珍,刘建航,白星振,等.基于有色Petri网的网络化传感系统研究[J].总线与网络,2015(9):29-32.CHENG Xuezhen,LIU Jianhang,BAI Xingzhen,et al.Research of Network Sensors System Based on ColoredPetri Nets.[J]. Bus and Network,2015(9):29-32.
[13]王纯子,张斌,黄光球.基于全网攻击模型的攻击策略挖掘与危险评估[J].计算机工程与应用,2012,48(4):1-4.WANG Chunzi,ZHANG Bin,HUANG Guangqiu. AttackStrategy Digging and Risk Evaluation Based on GlobalNetwork Attack Model[J]. Computer Engineering andApplications,2012,48(4):1-4.
[14]李刚,韩龙美,朱永利.基于时空Petri网的复杂软件系统可信建模与分析[J].系统仿真学报,2016,28(8):1740-1747.LI Gang,HAN Longmei,ZHU Yongli. Trusted Modelingand Analysis of Complex Software Systems Based on Spa-tial-temporal Petri Nets[J]. Journal of System Simula-tion,2016,28(8):1740-1747.
[15]高翔,祝跃飞,刘胜利.基于随机Petri网的BGP网络安全评估[J].信息工程大学学报,2013,14(2):223-228.GAO Xiang,ZHU Yuefei,LIU Shengli. BGP Network Se-curity Assessment Based on Stochastic Petri Nets[J].Journal of Information Engineering University,2013,14(2):223-228.
[2]Shifflet J.A technique independent fusion model for net-work intrusion detection[C]//In:Proceedings of the Mid-states Conference on Undergraduate Research in Comput-er Science and Mathematics.2005,3(1):13-19.
[3]Glenn A.Fink,Jereme N,et al.Cooperative Cyber Defensefor Securing Critical Infrastructures[J]. ACM Trans,Inf.Syst.Secur.2005,4(03):186-205.
[4] Haack,G.Fink,E.Fulp,et al.Cooperative InfrastructureDefense[EB/OL]. http://www.vizsec.org/workshop2008/fink.pdf.2014-05-06.
[5]王宁丽,余道华.改进型有色Petri网的安全协议分析[J].安徽工业大学学报(自然科学版),2010,27(4):413-418.WANG Ningli,YU Daohua.Analysis on Improved ColoredPetri Nets of Security Protocols[J]. Journal of Anhui Uni-versity of Technology(Natural Science),2010,27(4):413-418.
[6]孔轶艳.基于Petri网的骨干网络安全风险评估分析[J].河池学院学报,2012,32(5):85-91.KONG Yiyan.Analysis of security risk assessment of back-bone network based on Petri nets[J]. Journal of Hechi uni-versity,2012,32(5):85-91.
[7]张莉,赵丽红,蒋勇,等.基于Petri网跳面节点的空间信息网可靠性评估[J].控制工程,2016,23(S0):66-72.ZHANG Li,ZHAO Lihong,JIANG Yong,et al.ReliabilityEvaluation of Space Information Network Based on PetriNet Jump Surface Nodes[J]. Control Engineering of Chi-na,2016,23(S0):66-72.
[8]侯仁平,李孝忠.基于Petri网的病毒攻击建模[J].天津科技大学学报,2014,29(1):69-74.HOU Renping,LI Xiaozhong. A Model of Virus AttacksBased on Petri Nets[J]. Journal of Tianjin University ofScience&Technology,2014,29(1):69-74.
[9]Endsley M R.Design and evaluation for situation aware-ness enhancement[C]//Proceedings of the Human Factorsand Ergonomics Society Annual Meeting.SAGE Publica-tions,1988,32(2):97-101.
[10]黄卫东,童喆,刘寅卯.基于着色Petri网的情景演化应急预案流程建模[J].信息与控制,2013,42(4):492-498.HUANG Weidong,TONG Zhe,LIU Yinmao.Modeling ofEmergency Plan Business Process under Scenario Evolu-tion Based on Colored Petri Net[J]. Information and Con-trol,2013,42(4):492-498.
[11]王景光.信息系统建模与结构复杂性[M].北京:机械工业出版社,2011:63.WANG Jingguang.Modeling and structural complexity ofinformation systems[M]. Beijing:Machinery IndustryPress,2011:63.
[12]程学珍,刘建航,白星振,等.基于有色Petri网的网络化传感系统研究[J].总线与网络,2015(9):29-32.CHENG Xuezhen,LIU Jianhang,BAI Xingzhen,et al.Research of Network Sensors System Based on ColoredPetri Nets.[J]. Bus and Network,2015(9):29-32.
[13]王纯子,张斌,黄光球.基于全网攻击模型的攻击策略挖掘与危险评估[J].计算机工程与应用,2012,48(4):1-4.WANG Chunzi,ZHANG Bin,HUANG Guangqiu. AttackStrategy Digging and Risk Evaluation Based on GlobalNetwork Attack Model[J]. Computer Engineering andApplications,2012,48(4):1-4.
[14]李刚,韩龙美,朱永利.基于时空Petri网的复杂软件系统可信建模与分析[J].系统仿真学报,2016,28(8):1740-1747.LI Gang,HAN Longmei,ZHU Yongli. Trusted Modelingand Analysis of Complex Software Systems Based on Spa-tial-temporal Petri Nets[J]. Journal of System Simula-tion,2016,28(8):1740-1747.
[15]高翔,祝跃飞,刘胜利.基于随机Petri网的BGP网络安全评估[J].信息工程大学学报,2013,14(2):223-228.GAO Xiang,ZHU Yuefei,LIU Shengli. BGP Network Se-curity Assessment Based on Stochastic Petri Nets[J].Journal of Information Engineering University,2013,14(2):223-228.