Network security risk evaluation system based on game theory

Abstract

The present invention discloses a network safety risk evaluating system based on game theory. The system firstly collects network property data which comprises information of node address, service, application program, software leak, etc. from an evaluated network, describes with a first-order predicate logic, reasons with an XSB reasoning engine based on the description of first-order predicate logic, and obtaining the leak which is on the evaluated network system and can be used by an attacker, and a corresponding attack threat. Aiming at each attack threat, the system according to the invention establishes a game theoretical attack-defense model GTADM and calculates the game equilibrium point. The obtained attack probability is multiplied to the expected damage value of the attack to the attack target for obtaining the attack risk to the system. Thereby the risk level of nodes in the evaluated system is obtained and the security evaluating to the network is realized.

Description

Technical field [0001] The invention relates to a network security risk assessment system, more particularly, to a network security risk assessment system based on game theory. Background technique [0002] Risk assessment in computer network space is an important part of information security risk assessment. Due to the widespread application of networks, this field has been one of the main hotspots of network security research in recent years. A series of methods and frameworks such as Markov chain and uncertainty reasoning have been proposed, but there is currently no widely accepted general method in this field. One of the most important issues is how to quantify the possibility of threats. On the one hand, people can only determine the possibility of a threat from some indirect information, educated guesses, intuition, or other subjective factors, thereby introducing inappropriate subjectivity; on the other hand, the occurrence of an attack threat also reflects The judgment...

AI Technical Summary

Problems solved by technology

On the one hand, people can only determine the possibility of threats from some indirect information, educated guesses, intuition or other subjective factors, thus introducing inappropriate subjectivity; on the other hand, the occurrence of attack threats also reflects the The judgment and will of the attacker cannot be completely obtained through objective analysis

Images