Network space security measurement method based on differential manifolds

Abstract

The invention discloses a network space security measurement method based on differential manifolds, which is more objective, more accurate and more comprehensive compared with other traditional network space security measurement and evaluation methods. The method comprises the following steps: firstly, establishing a network space security index system based on three dimensions, wherein the threedimensions comprise a reliability dimension, an environment dimension and a vulnerability dimension, which are considered from three aspects of hardware environment, software resources and vulnerabilities depending on which the network survive; constructing the established network space security index system into two differential manifolds of attack and defense by using a differential manifold construction method, wherein the network defense differential manifold is established according to the reliability dimension and the environment dimension, and the network attack differential manifold is established according to the vulnerability dimension; measuring the established two differential manifolds of network attack and defense by using a mathematical function to obtain the defense powerof the network defense differential manifold and the attack energy of the network attack differential manifold; and using the defense power and the attack energy as network space security measurementvalues.

Description

technical field [0001] The invention relates to the technical field of cyberspace security, in particular to a differential manifold-based cyberspace security measurement method. Background technique [0002] With the rapid development of the network in recent years, cyberspace security issues are also emerging. Evaluation and measurement are prerequisites. Only by measuring and evaluating the network can we find hidden dangers in the network and improve the network accordingly. How to make an accurate, objective and comprehensive evaluation and measurement of the network has always been the focus and difficulty of cyberspace security research. Generally speaking, the common cyberspace security assessment and measurement methods are Analytic Hierarchy Process (AHP) and attack graph model, but both of them have certain defects. Due to the expert weight of AHP, the measurement results are not accurate and objective enough, and the attack graph model does not consider network...

Images