Network information security assessment method in adversarial scene based on fuzzy analytic hierarchy process

Abstract

The invention discloses a network information security assessment method in an adversarial scene based on fuzzy analytic hierarchy process, which relates to the technical field of network communication, and comprises the following steps: acquiring a signal received by a receiver, eliminating an interference signal in the signal received by the receiver, and determining the security of network information by setting a fuzzy judgment matrix. Performing relative importance judgment on each index feature extracted from the target signal after the interference signal is eliminated, and setting an index weight coefficient matched with each index feature according to a relative importance judgment result of each index feature; and carrying out weighted summation processing on all the index characteristics extracted from the target signal to obtain a comprehensive evaluation result of the target signal, thereby completing information security evaluation on the target signal.

Description

Technical Field

[0001] The present invention relates to the field of network communication technology, and in particular to a network information security assessment method in a confrontation scenario based on fuzzy hierarchical analysis. Background Art

[0002] The research on anti-interference technology of satellite communication technology is mainly aimed at the intentional interference of the enemy using special interference equipment to disrupt the normal communication of various links of satellite communication. In order to achieve the anti-interference capability of communication, traditional satellite communication systems usually adopt: (1) Time domain direct sequence (DS) spread spectrum: directly use high code rate spread spectrum code sequence to expand the signal spectrum at the transmitting end, so that the signal is submerged in the noise, and it is difficult for the enemy to detect the existence of the signal; (2) Frequency hopping (FH): refers to multi-frequency frequency shift keying selected by a certain code sequence, so that the carrier frequency jumps continuously; (3) Time hopping (TH): refers to multi-time chip time shift keying selected by a certain code sequence, so that the transmitted signal jumps on the time axis; (4) Various hybrid methods;

[0003] How to effectively evaluate the network information security in different confrontation scenarios during network communication is a technical problem we need to solve. To this end, a network information security evaluation method in confrontation scenarios based on fuzzy hierarchical analysis is provided. Summary of the invention

[0004] The purpose of the present invention is to provide a network information security assessment method in a confrontation scenario based on fuzzy hierarchical analysis.

[0005] The purpose of the present invention can be achieved by the following technical solutions:

[0006] The network information security assessment method in the confrontation scenario based on fuzzy hierarchical analysis includes the following steps:

[0007] Step S1: obtaining a signal received by a receiver, and eliminating an interference signal in the signal received by the receiver;

[0008] Step S2: extracting index features from the signal after eliminating the interference signal, and obtaining the index feature value corresponding to each index feature;

[0009] Step S3: construct a fuzzy judgment matrix, compare the relative importance of each indicator feature through the constructed fuzzy judgment matrix, and obtain the corresponding importance evaluation result;

[0010] Step S4: Perform security assessment on each indicator feature value according to the importance assessment result of the indicator feature, and obtain the corresponding security assessment result.

[0011] Furthermore, the receiver is provided with a plurality of receiving channels, and each receiving channel is provided with a corresponding receiving frequency;

[0012] The receiving channel of the received signal is marked, and the signal frequency, signal phase and signal power of all signals received by the receiving channel are obtained.

[0013] Furthermore, the process of eliminating the interference signal in the signal received by the receiver includes:

[0014] Performing signal frequency recognition on the received signal to obtain the type of signal frequency contained in the received signal;

[0015] Determine the target signal according to the type of signal frequency obtained, and record the signal frequency of the target signal as f s , the signal phase is recorded as , the signal power is recorded as P s ;

[0016] The signals other than the target signal are recorded as interference signals, and the signal frequency of the interference signal is recorded as , the signal power is recorded as , the signal phase is recorded as ;

[0017] Then the interference signal of the receiver is obtained as j(t);

[0018] ;

[0019] Get the bit error probability between the target signal and the interference signal, denoted as ; According to the bit error probability between the target signal and the interference signal, the target signal after eliminating the interference signal is obtained, which is recorded as ,in

[0020] .

[0021] 4. The network information security assessment method in a confrontation scenario based on fuzzy hierarchical analysis according to claim 3 is characterized in that the process of obtaining the bit error probability includes:

[0022] ;

[0023] in ;

[0024] ;

[0025] Where S is the power of the signal, is the frequency deviation of the tone, N is the system spread spectrum multiple, and T is the signal frequency hopping period.

[0026] Furthermore, the process of extracting index features from the signal after eliminating the interference signal includes:

[0027] The target signal after eliminating the interference signal is subjected to index feature extraction, and a corresponding index evaluation table is constructed according to the extracted index features. The index evaluation table includes index name, index level, index value and index scoring standard.

[0028] Furthermore, a fuzzy judgment matrix is ​​constructed, and the relative importance of each indicator feature is compared through the constructed fuzzy judgment matrix, and the process of obtaining the corresponding importance evaluation result includes:

[0029] The fuzzy judgment matrix is ​​denoted as F, where

[0030] ;

[0031] Among them, n represents the number of indicator features, f ij Indicates the membership degree of the fuzzy relationship “…is much more important than…” between the i-th indicator feature and the j-th indicator feature, where i=1, 2, …, n; j=1, 2, …, n;

[0032] The constructed fuzzy judgment matrix is ​​normalized to obtain the corresponding sorting vector, which is recorded as , ;

[0033] but ;

[0034] Perform weighted summation on the obtained ranking vectors to obtain the importance evaluation result of the indicator feature labeled i, denoted as I i ,in

[0035] ;

[0036] Among them C i Represents the i-th evaluation indicator feature.

[0037] Furthermore, the process of performing a security assessment on each indicator characteristic value according to the importance assessment result of the indicator characteristic and obtaining the corresponding security assessment result includes:

[0038] According to the evaluation results of each indicator feature obtained, the relative importance of each indicator feature is ranked;

[0039] According to the sorting results, set the corresponding indicator weight coefficient for each indicator feature;

[0040] Match each indicator feature with the indicator evaluation table to obtain the scoring criteria for the corresponding indicator feature, and obtain the indicator score for the corresponding indicator feature based on the obtained scoring criteria for each indicator feature;

[0041] According to the obtained indicator scores and the corresponding indicator weight coefficients, each indicator feature is weighted and summed to obtain the information security assessment coefficient of the corresponding target signal, which is recorded as Xp, where

[0042] ;

[0043] in The indicator weight coefficient representing the indicator feature numbered i, represents the indicator score of the indicator feature labeled i;

[0044] Set the information security score threshold, denoted as ;

[0045] When Xp ≥ When Xp< . It means that the information security assessment result of the target signal is "abnormal".

[0046] Compared with the prior art, the present invention has the following beneficial effects:

[0047] 1. By eliminating interference signals before information security assessment of the target signal, when the target signal is subsequently assessed for information security, the assessment object is only the target signal itself, eliminating the influence of interference signals on the assessment results, which may cause distortion of the assessment results;

[0048] 2. By setting up a fuzzy judgment matrix, the relative importance of each indicator feature extracted from the target signal is judged, and then according to the relative importance judgment results of each indicator feature, a matching indicator weight coefficient is set for each indicator feature, and then all indicator features extracted from the target signal are weighted and summed to obtain a comprehensive evaluation result of the target signal, thereby completing the information security evaluation of the target signal. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] Figure 1 It is a principle block diagram of the present invention. DETAILED DESCRIPTION

[0050] like Figure 1 As shown in the figure, the network information security assessment method in the confrontation scenario based on fuzzy hierarchical analysis includes the following steps:

[0051] Step S1: obtaining a signal received by a receiver, and eliminating an interference signal in the signal received by the receiver;

[0052] Step S2: extracting index features from the signal after eliminating the interference signal, and obtaining the index feature value corresponding to each index feature;

[0053] Step S3: construct a fuzzy judgment matrix, compare the relative importance of each indicator feature through the constructed fuzzy judgment matrix, and obtain the corresponding importance evaluation result;

[0054] Step S4: Perform security assessment on each indicator feature value according to the importance assessment result of the indicator feature, and obtain the corresponding security assessment result.

[0055] It should be further explained that, in the specific implementation process, the receiver is provided with a plurality of receiving channels, and each receiving channel is provided with a corresponding receiving frequency;

[0056] Marking the receiving channel of the received signal, and obtaining the signal frequency, signal phase and signal power of all signals received by the receiving channel;

[0057] It should be further explained that, in a specific implementation process, the process of eliminating the interference signal in the signal received by the receiver includes:

[0058] Performing signal frequency recognition on the received signal to obtain the type of signal frequency contained in the received signal;

[0059] Determine the target signal according to the type of signal frequency obtained, and record the signal frequency of the target signal as f s , the signal phase is recorded as , the signal power is recorded as P s ;

[0060] The signals other than the target signal are recorded as interference signals, and the signal frequency of the interference signal is recorded as , the signal power is recorded as , the signal phase is recorded as ;

[0061] Then the interference signal of the receiver is obtained as j(t);

[0062] ;

[0063] Get the bit error probability between the target signal and the interference signal, denoted as It should be further explained that, in the specific implementation process, the interference effect of the interference signal on the target signal depends on the phase of the interference signal relative to the target signal, where Represents the phase difference between the interference signal and the target signal;

[0064] Therefore, in the specific implementation process, in order to eliminate the phase difference between the target signal and the interference signal, it is necessary to ) and the target signal after eliminating the interference signal is obtained according to the bit error probability between the target signal and the interference signal, which is recorded as ,in

[0065] .

[0066] It should be further explained that, in a specific implementation process, the process of obtaining the bit error probability includes:

[0067] ;

[0068] in ;

[0069] ;

[0070] Where S is the power of the signal, is the frequency deviation of the tone, N is the system spread spectrum multiple, and T is the signal frequency hopping period;

[0071] It should be further explained that the present invention eliminates interference signals before information security evaluation of the target signal, so that when the target signal is subsequently evaluated for information security, the evaluation object is only the target signal itself, eliminating the influence of the interference signal on the evaluation result, which may cause distortion of the evaluation result.

[0072] It should be further explained that, in the specific implementation process, the process of extracting the index features of the signal after eliminating the interference signal includes:

[0073] The target signal after eliminating the interference signal is subjected to index feature extraction, and a corresponding index evaluation table is constructed according to the extracted index features. The index evaluation table includes index name, index level, index value and index scoring standard.

[0074] It should be further explained that, in the specific implementation process, the fuzzy judgment matrix is ​​recorded as F, where

[0075] ;

[0076] Among them, n represents the number of indicator features, f ij Indicates the membership degree of the fuzzy relationship “…is much more important than…” between the i-th indicator feature and the j-th indicator feature, where i=1, 2, …, n; j=1, 2, …, n;

[0077] The constructed fuzzy judgment matrix is ​​normalized to obtain the corresponding sorting vector, which is recorded as , ;

[0078] but ;

[0079] Perform weighted summation on the obtained ranking vectors to obtain the importance evaluation result of the indicator feature labeled i, denoted as I i ,in

[0080] ;

[0081] Among them C i Represents the i-th evaluation indicator feature.

[0082] It should be further explained that, in the specific implementation process, the process of conducting a security assessment on each indicator characteristic value according to the importance assessment result of the indicator characteristic and obtaining the corresponding security assessment result includes:

[0083] According to the evaluation results of each indicator feature obtained, the relative importance of each indicator feature is ranked;

[0084] According to the sorting results, set the corresponding indicator weight coefficient for each indicator feature;

[0085] Match each indicator feature with the indicator evaluation table to obtain the scoring criteria for the corresponding indicator feature, and obtain the indicator score for the corresponding indicator feature based on the obtained scoring criteria for each indicator feature;

[0086] According to the obtained indicator scores and the corresponding indicator weight coefficients, each indicator feature is weighted and summed to obtain the information security assessment coefficient of the corresponding target signal, which is recorded as Xp, where

[0087] ;

[0088] in The indicator weight coefficient representing the indicator feature numbered i, represents the indicator score of the indicator feature labeled i;

[0089] Set the information security score threshold, denoted as ;

[0090] When Xp ≥ When Xp< . It means that the information security assessment result of the target signal is "abnormal";

[0091] It should be further explained that the present invention sets a fuzzy judgment matrix to judge the relative importance of each indicator feature extracted from the target signal, and then sets an indicator weight coefficient that matches each indicator feature according to the relative importance judgment result of each indicator feature, and then performs weighted summation processing on all indicator features extracted from the target signal to obtain a comprehensive evaluation result of the target signal, thereby completing the information security evaluation of the target signal.

[0092] The above embodiments are only used to illustrate the technical method of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical method of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical method of the present invention.

Claims

1. A network information security assessment method in a confrontation scenario based on fuzzy hierarchical analysis, characterized in that: The following steps are involved: Step S1: obtaining a signal received by a receiver, and eliminating an interference signal in the signal received by the receiver; Step S2: extracting index features from the signal after eliminating the interference signal, and obtaining the index feature value corresponding to each index feature; Step S3: construct a fuzzy judgment matrix, compare the relative importance of each indicator feature through the constructed fuzzy judgment matrix, and obtain the corresponding importance evaluation result; Step S4: Perform security assessment on each indicator feature value according to the importance assessment result of the indicator feature, and obtain the corresponding security assessment result.

2. The network information security assessment method in a confrontation scenario based on fuzzy hierarchical analysis according to claim 1 is characterized in that: The receiver is provided with a plurality of receiving channels, and each receiving channel is provided with a corresponding receiving frequency; The receiving channel of the received signal is marked, and the signal frequency, signal phase and signal power of all signals received by the receiving channel are obtained.

3. The network information security assessment method in a confrontation scenario based on fuzzy hierarchical analysis according to claim 2 is characterized in that: The process of eliminating the interference signal in the signal received by the receiver includes: Performing signal frequency recognition on the received signal to obtain the type of signal frequency contained in the received signal; Determine the target signal according to the type of signal frequency obtained, and record the signal frequency of the target signal as f s , the signal phase is recorded as , the signal power is recorded as P s ; The signals other than the target signal are recorded as interference signals, and the signal frequency of the interference signal is recorded as , the signal power is recorded as , the signal phase is recorded as ; Then the interference signal of the receiver is obtained as j(t); ； Get the bit error probability between the target signal and the interference signal, denoted as ; According to the bit error probability between the target signal and the interference signal, the target signal after eliminating the interference signal is obtained, which is recorded as ,in 。 4. The network information security assessment method in a confrontation scenario based on fuzzy hierarchical analysis according to claim 3 is characterized in that: The process of obtaining the bit error probability includes: ； in ; ； Where S is the power of the signal, is the frequency deviation of the tone, N is the system spread spectrum multiple, and T is the signal frequency hopping period.

5. The network information security assessment method in a confrontation scenario based on fuzzy hierarchical analysis according to claim 4 is characterized in that: The process of extracting index features from the signal after eliminating the interference signal includes: The target signal after eliminating the interference signal is subjected to index feature extraction, and a corresponding index evaluation table is constructed according to the extracted index features. The index evaluation table includes index name, index level, index value and index scoring standard.

6. The network information security assessment method in a confrontation scenario based on fuzzy hierarchical analysis according to claim 5 is characterized in that: The process of constructing a fuzzy judgment matrix, comparing the relative importance of each indicator feature through the constructed fuzzy judgment matrix, and obtaining the corresponding importance evaluation results includes: The fuzzy judgment matrix is ​​denoted as F, where ； Among them, n represents the number of indicator features, f ij Indicates the membership degree of the fuzzy relationship "... is much more important than..." between the i-th indicator feature and the j-th indicator feature, where i=1, 2, ..., n; j=1, 2, ..., n; The constructed fuzzy judgment matrix is ​​normalized to obtain the corresponding sorting vector, which is recorded as , ; but ; Perform weighted summation on the obtained ranking vectors to obtain the importance evaluation result of the indicator feature labeled i, denoted as I i ,in ； Among them C i Represents the i-th evaluation indicator feature.

7. The network information security assessment method in a confrontation scenario based on fuzzy hierarchical analysis according to claim 6 is characterized in that: The process of conducting a safety assessment on each indicator characteristic value according to the importance assessment result of the indicator characteristic and obtaining the corresponding safety assessment result includes: According to the evaluation results of each indicator feature obtained, the relative importance of each indicator feature is ranked; According to the sorting results, set the corresponding indicator weight coefficient for each indicator feature; Match each indicator feature with the indicator evaluation table to obtain the scoring criteria for the corresponding indicator feature, and obtain the indicator score for the corresponding indicator feature based on the obtained scoring criteria for each indicator feature; According to the obtained indicator scores and the corresponding indicator weight coefficients, each indicator feature is weighted and summed to obtain the information security assessment coefficient of the corresponding target signal, which is recorded as Xp, where ； in The indicator weight coefficient representing the indicator feature numbered i, represents the indicator score of the indicator feature labeled i; Set the information security score threshold, denoted as ; When Xp ≥ When Xp< , it means that the information security assessment result of the target signal is "abnormal".

Images