Network security threat early warning method and device based on qualitative differential game and evolutionary game

Abstract

The invention belongs to the technical field of network security, and particularly relates to a network security threat early warning method and device based on a qualitative differential game and anevolutionary game, and the method comprises the steps: constructing a multi-dimensional network security state space by combining a network system function and a topological structure of the network system function; introducing a qualitative differential game, constructing an attack and defense qualitative differential game model, and obtaining an attack and defense boundary grid according to theattack and defense qualitative differential game model; introducing an evolutionary game, constructing an attack and defense evolutionary game model, and obtaining a network security state evolution track according to the attack and defense evolutionary game model; and obtaining threat degrees of different security states according to a multi-dimensional space Euclidean distance between the network security state evolution track and the attack and defense boundary grid. The problems of time discontinuity and complete rationality of the threat analysis method based on the traditional game theory is solved, network security analysis more closely to attack and defense reality is carried out, the early warning timeliness, objectivity and accuracy are improved, and the method has important guiding significance for network security technology development.

Description

technical field [0001] The invention belongs to the technical field of network security, in particular to a network security threat early warning method and device based on qualitative differential game and evolutionary game. Background technique [0002] With the rapid development of network technology and the increasing popularity of service functions, the network system has become the infrastructure for maintaining the orderly and efficient operation of social life. Timely and accurate security threat early warning is of great value to enhance security prevention and control capabilities and improve network security defense decision-making level. The essence of network security lies in offensive and defensive confrontation. Therefore, only on the basis of modeling deduction and quantitative analysis of offensive and defensive confrontation behaviors and their mutual influence can comprehensive, accurate and early warning analysis of security threats be achieved. Game the...

AI Technical Summary

Problems solved by technology

However, most of the existing network security game analysis studies are based on the assumption that the gamers are completely rational, but this assumption is often difficult to satisfy in the actual confrontation process, and the rationality of both attackers and defenders is limited and not complete; on the other hand, The analysis method using the multi-stage dynamic game model can only study time-discrete and intermittent network attack and defense behaviors, and cannot satisfy the continuous, real-time, and high-frequency characteristics of the actual network attack and defense process, which greatly weakens the analysis and early warning of network security threats Objectivity, practicability and effectiveness of the method

Images