Real-time network security threat early warning analysis method and apparatus thereof

Abstract

The invention relates to a real-time network security threat early warning analysis method and an apparatus thereof. The method comprises the following steps: analyzing a network security threat dynamic propagation process with reference to an epidemic dynamics model, and constructing a network attack and defense qualitative differential game model; solving the network attack and defense qualitative differential game model to obtain an attack and defense boundary grid, and dividing a network security state space into a capture area and an evasion area of a network security threat metric; obtaining the distance between a real-time network security state and the attack and defense boundary grid by importing the multi-dimensional space Euclidean distance; and measuring the degree of threat inthe network security state according to the distance, and performing dynamic early warning. By adoption of the real-time network security threat early warning analysis method provided by the invention, the game model of capable of analyzing dynamic, continuous and real-time attack and defense processes is established, an effective model method is provided for analyzing and predicting the dynamically changing network security threat and performing real-time network security threat early warning, and the real-time network security threat early warning analysis method is higher in accuracy and timeliness, is closer to the attack and defense practice, and is able to achieve more timely and comprehensive threat early warning.

Description

technical field [0001] The invention belongs to the technical field of network security defense, and in particular relates to a real-time network security threat early warning analysis method and a device thereof. Background technique [0002] With the rapid development of technology and the increasing popularity of services, today's network infrastructure has become the nervous system of social life, accurately judge the severity of current network security threats and predict its evolution trend, realize timely and accurate security threat early warning, and make decisions on network security actions and emergency response is of great value. The essence of network security lies in offensive and defensive confrontation. Therefore, on the basis of modeling and deduction, quantitative analysis of offensive and defensive confrontation behaviors and their mutual influence, comprehensive, accurate and credible early warning assessment of security threats can be achieved. Game t...

AI Technical Summary

Problems solved by technology

At present, the confrontation in cyberspace is becoming more and more intense, and the network attack and defense are developing in a fast, real-time, and diversified direction. The security threat analysis method based on the traditional dynamic game can no longer meet the actual requirements.

Images