Network space security measurement method based on differential manifolds

Abstract

The invention discloses a network space security measurement method based on differential manifolds, which is more objective, more accurate and more comprehensive compared with other traditional network space security measurement and evaluation methods. The method comprises the following steps: firstly, establishing a network space security index system based on three dimensions, wherein the threedimensions comprise a reliability dimension, an environment dimension and a vulnerability dimension, which are considered from three aspects of hardware environment, software resources and vulnerabilities depending on which the network survive; constructing the established network space security index system into two differential manifolds of attack and defense by using a differential manifold construction method, wherein the network defense differential manifold is established according to the reliability dimension and the environment dimension, and the network attack differential manifold is established according to the vulnerability dimension; measuring the established two differential manifolds of network attack and defense by using a mathematical function to obtain the defense powerof the network defense differential manifold and the attack energy of the network attack differential manifold; and using the defense power and the attack energy as network space security measurementvalues.

Description

technical field [0001] The invention relates to the technical field of cyberspace security, in particular to a differential manifold-based cyberspace security measurement method. Background technique [0002] With the rapid development of the network in recent years, cyberspace security issues are also emerging. Evaluation and measurement are prerequisites. Only by measuring and evaluating the network can we find hidden dangers in the network and improve the network accordingly. How to make an accurate, objective and comprehensive evaluation and measurement of the network has always been the focus and difficulty of cyberspace security research. Generally speaking, the common cyberspace security assessment and measurement methods are Analytic Hierarchy Process (AHP) and attack graph model, but both of them have certain defects. Due to the expert weight of AHP, the measurement results are not accurate and objective enough, and the attack graph model does not consider network...

AI Technical Summary

Problems solved by technology

AHP uses layered thinking to build an index system to calculate complex networks. Although it can make cyberspace security assessments shift from qualitative to quantitative measurement, there are still some problems: First, the traditional AHP decomposes complex multi-objective problems into target layers , criterion layer and index layer, but when classifying specific problems, there is no general method to determine the criterion layer and index layer, and the granularity of the layers can be defined by yourself, but it may lead to unclear division of layers, and inconsistent results due to different layers question

Second, it does not consider the relationship between levels. For complex big problems, there is usually a certain relationship between different levels. The traditional AHP does not consider this

However, there are three problems in the attack graph model. One is to simulate the attack process without considering the defense of the network system; the other is that when there are many nodes in the network system, state explosion is prone to occur; High graph complexity and high computational complexity require a lot of price

The third is that the attack graph model theoretically simulates all possible attack paths, but in fact, the attacker will only use one or a few of the optimal paths, which leads to only a very small part of the many simulated paths being useful.

[0009] Although differential manifolds have been applied in image processing, surface construction, mechanism, physics, etc., the measurement of cyberspace security is still blank

Images