Method and device for selecting defensive opportunities of moving targets based on concealed confrontation

Abstract

The invention belongs to the field of network security, and in particular relates to a method and device for selecting a mobile target defense opportunity based on concealment confrontation. The method includes: analyzing the attack process based on the network kill chain; constructing the MTD network attack surface state transition based on the SIRM infectious disease model Model; build a time game-based MTD attack and defense timing selection model; solve the game equilibrium for the time game-based MTD attack and defense timing selection model, and select the optimal MTD timing. The present invention fits the real network attack and defense scenario, and analyzes the optimal equilibrium point of the timing of the attacker and the defender to implement the strategy within the framework of the time game theory, so as to guide the defender to implement the MTD timing, so as to balance the SDN service quality and MTD decision-making benefits question.

Description

technical field [0001] The invention belongs to the field of network security, in particular to a method and device for selecting a mobile target defense opportunity based on concealment confrontation. Background technique [0002] With the continuous development of advanced persistent threat (Advanced Persistent Threat, APT) and other network attack methods, Internet security is facing severe challenges. As a next-generation new network system, Software Defined Network (SDN) faces increasingly prominent security threats. Due to the centralized control of SDN, the SDN controller becomes a single-point attack target for attackers. At the same time, the southbound interface between the control layer and the data layer is also vulnerable to network attacks such as scanning detection, denial of service, and fraudulent implantation. , so it is urgent to analyze and predict security attack and defense behaviors in SDN. In order to solve the actual problems and potential threats ...

AI Technical Summary

Problems solved by technology

Game theory is an analysis tool for describing the interaction of decision-making subjects. As a game theory framework for modeling computer security scenarios, time games have been widely used in security attack and defense scenarios such as directional attack modeling, encryption key update, password policy change, and cloud auditing. However, few scholars have applied it to the research on the timing selection of moving target defense.

Images