A Network Risk Analysis and Optimal Active Defense Method Based on Multilevel Game Model

Abstract

The invention proposes a network risk analysis and optimal active defense method based on a multi-level game model, aiming at the problem that many vulnerabilities existing in the network may affect the network to a certain extent. The method comprises steps of step 1, according to security vulnerabilities obtained by scanning the network and possible defense strategies, constructing a network risk analysis defense model; step 2, constructing a judgment matrix according to the network risk analysis defense model described in step one; step 3, obtaining a theoretical attack and defense optimalstrategy according to the attack and defense game income matrix; step 4, based on the optimal attack and defense strategy obtained in step 3, updating the judgment matrix according to a judgment matrix update algorithm, and recalculating the risk weight; and step 5, comparing the judgment matrix described in step 2 with the judgment matrix described in step 4, and calculating the percentage of decline of the risk weight of step 4 compared with step 2 to assess the pros and cons of the defense strategies.

Description

technical field [0001] The invention belongs to the field of network space security, and in particular relates to a network risk analysis and optimal active defense method based on a multi-level game model. Background technique [0002] At present, the evaluation methods of network risk at home and abroad mainly include: Markov state transition analysis method, Bayesian model analysis method, fault tree analysis method, fuzzy comprehensive evaluation method, etc. These methods can obtain the risk value of the evaluated network after the case analysis, and finally judge which risk level the value belongs to according to the predetermined risk level. On the problem of defense strategy selection, most research methods at home and abroad just put forward the optimal method of their respective theories, and do not prove the validity of the method, which lacks certain reliability compared with the present invention. [0003] The existing literature related to network risk analysi...

AI Technical Summary

Problems solved by technology

[0004] The existing network risk assessment methods, no matter which assessment technology is adopted, the result is still at the level of obtaining a risk value or degree of risk, and no corresponding and effective defense measures are proposed for the network with the measured risk to reduce the risk of the network. risk, and most technologies ignore the complex multi-level structure of the network itself, and cannot fully measure the risk value of each level of the network

At the same time, when defending against possible attacks in the network in advance, the existing technology only calculates more reasonable defense measures through certain methods, and lacks proof of the effectiveness of the measures taken to improve network security

Images