Markov signal game-based moving target defense strategy selection method and equipment

Abstract

The invention belongs to the technical field of network security, in particular to a Markov signal game-based moving target defense strategy selection method and device. The method comprises the stepsthat a signal game model and a Markov decision process are combined, a multi-stage Markov signal game model is constructed, the multi-stage Markov signal game model comprises a plurality of independent and similar single-stage signal game models, and the signal game of each single-stage signal game model belongs to a limited game; a target function is selected in the defense and confrontation process of the moving target, and a multi-stage game equilibrium solving result is obtained; and an optimal defense strategy is selected according to a multi-stage game equilibrium solving result. The dynamic confrontation process between the attacker and the defender is analyzed, multi-stage game equilibrium is solved, the optimal defense strategy is selected, the defects of passive defense in the field of network space security are overcome, the timeliness, objectivity and accuracy of system defense are improved, and the active defense capacity of network security is enhanced.

Description

Technical field [0001] The invention belongs to the technical field of network security, and particularly relates to a method and equipment for selecting a mobile target defense strategy based on Markov signal game. Background technique [0002] The most prominent problem in the current cyberspace security field is "easy to attack and difficult to defend". The reasons can be divided into the following three aspects: First, the attacker has the time advantage, and the target system can be detected by active scanning and passive monitoring. Key information such as port information, network protocol vulnerabilities and other key information is subject to penetration testing and vulnerability analysis; the second is that the attacker has the advantage of the ability, the attacker has the advantage of the ability to collect information and plan attack methods in advance, and the structure of the target system is certain, static and identical. The structure increases the probability th...

AI Technical Summary

Problems solved by technology

[0004] To this end, the present invention provides a method and device for selecting a defense strategy for moving targets based on Markov signal games, which solves the problems of ignoring the influence of attack and defense information on strategies and revenues and the inability to describe moving targets when traditional game models are applied to the selection of defense strategies for moving targets. The probability update in the defense attack and defense process is affected by random factors and other issues, improving the timeliness, objectivity and accuracy of system defense, and has a strong application prospect

Images