Method and equipment for moving target defense strategy selection based on markov signal game

Abstract

The invention belongs to the technical field of network security, and particularly relates to a method and equipment for selecting a defense strategy of a moving target based on a Markov signal game. The method includes: combining a signal game model and a Markov decision process to construct a multi-stage Markov signal game model , the multi-stage Markov signal game model consists of multiple independent and similar single-stage signal game models, and the signal game of each single-stage signal game model belongs to the finite game; the objective function in the process of moving target defense confrontation is selected, and Obtain the multi-stage game equilibrium solution results; select the optimal defense strategy based on the multi-stage game equilibrium solution results. The invention analyzes the dynamic confrontation process between the attacker and the defender, solves the multi-stage game equilibrium, selects the optimal defense strategy, makes up for the deficiency of passive defense in the field of network space security, and improves the timeliness, objectivity and accuracy of system defense. Strengthen the active defense capability of network security.

Description

technical field [0001] The invention belongs to the technical field of network security, in particular to a method and equipment for selecting a defense strategy of a moving target based on Markov signal game. Background technique [0002] The current prominent problem in the field of cyberspace security is "easy to attack and difficult to defend". Port information, network protocol vulnerabilities and other key information for penetration testing and vulnerability analysis; second, the attacker has the advantage of ability, the attacker has the ability to collect information in advance and plan attack methods, the deterministic, static and homogeneous structure of the target system The structure increases the probability that the vulnerability is successfully exploited by the attacker; third, the attacker has a cost advantage, and the attacker only needs to find some system vulnerabilities to form an attack chain to successfully launch an attack. Defense technologies such ...

AI Technical Summary

Problems solved by technology

[0004] To this end, the present invention provides a method and device for selecting a defense strategy for moving targets based on Markov signal games, which solves the problems of ignoring the influence of attack and defense information on strategies and revenues and the inability to describe moving targets when traditional game models are applied to the selection of defense strategies for moving targets. The probability update in the defense attack and defense process is affected by random factors and other issues, improving the timeliness, objectivity and accuracy of system defense, and has a strong application prospect

Images