Dynamic heterogeneous redundant system security analysis method and device aiming at black box condition

Abstract

The invention discloses a dynamic heterogeneous redundant system security analysis method and device aiming at a black box condition. The method comprises the following steps: constructing an executor-vulnerability matrix and a service body-vulnerability matrix; calculating a system attack success rate and a system control rate during non-collusion blind attacks and collusion blind attacks of multiple attackers, and finally performing security analysis on the current DHR system according to the system attack success rate and the system control rate. According to the method, the success rate and the control rate of multiple attacks under the collusion and non-collusion conditions of multiple attackers can be calculated, and compared with an existing analysis method based on a single attack of a single attacker, the safety of the DHR system can be represented more comprehensively and fully.

Description

technical field [0001] The invention belongs to the technical field of cyberspace security, and relates to a security analysis method for a dynamic heterogeneous redundant system aimed at black boxes. Background technique [0002] The current network security is in a situation of "easy to attack but difficult to defend". At present, the main defense methods are essentially to use prior knowledge to identify and defend against known threats, which cannot effectively solve the security threats when vulnerabilities and backdoors are unknown, and have certain Hysteresis. In this regard, a variety of network security dynamic defense solutions have emerged to effectively improve the system security level under unknown threats, typically including Moving Target Defense (Moving Target Defense, MTD) technology and Cyber ​​Mimic Defense (Cyber ​​Mimic Defense, CMD) technology. CMD was first proposed by Academician Wu Jiangxing's team, and it mainly builds a secure information system ...

AI Technical Summary

Problems solved by technology

The current probability-based methods are limited to the single attack success rate and multi-step attack success rate analysis based on a single attack. In reality, most network attacks are attacked by multiple attackers at the same time, and security indicators such as the single attack success rate are difficult to achieve. It is used to guide the construction of DHR system and compare the security of different DHR models

Automata-based analysis methods and Markov-based methods are cumbersome to implement due to the need for a large number of expert manual operations

Images