Mobile target defense decision selection method, device and system based on Markov time game

Abstract

The invention belongs to the technical field of network security, and particularly relates to a moving target defense decision selection method, device and system based on a Markov time game, and themethod comprises the steps: building a moving target attack and defense strategy set; analyzing a moving target defense process based on the Markov time game, and constructing a Markov time game moving target defense model; and carrying out equilibrium solution on the Markov time game moving target defense model, and determining an optimal strategy in the confrontation process of the Markov time game moving target defense model. On the basis of analyzing a moving target attack and defense process, a Markov time game model is constructed, a target criterion function of a moving target defense game is designed based on discount total revenue, and multi-stage attack and defense game quantitative analysis is realized; designing a multi-stage optimal defense strategy selection algorithm based on nonlinear programming multi-stage game equilibrium calculation; further, experimental research results show that the confrontation process can be effectively described, the optimal strategy can be correctly selected, the implementation accuracy of moving target defense can be ensured, and network security management personnel can be helped to make a better decision.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to a method, device and system for moving target defense decision selection based on Markov time game. Background technique [0002] The global network security offensive and defensive competition has reached unprecedented intensity, and various network attack incidents are intensifying. Network attackers continue to formulate new attack strategies, among which Moving Target Attack (MTA) technology is the most popular in the attacker's arsenal. It uses various uncertain attack methods to hide the attack intention, and tries to evade the detection mechanism of traditional network defense. Since the traditional network defense mechanism cannot accurately predict the next attack action of the attacker, MTA technology plays an important role in the network attack and defense game. This not only poses a great security threat to cyberspace, but also generates high def...

AI Technical Summary

Problems solved by technology

However, the single-stage game is difficult to effectively describe the characteristics of continuous and dynamic changes in the defense of moving targets, and it is limited in the actual application process.

Images