Optimal Allocation of Network Defense Resources Against Advanced Persistent Threats

Abstract

The invention discloses an optimal allocation method of network defense resources for advanced persistent threats, including: using time-varying dynamic system theory to model the network attack and defense process of advanced persistent threats; using the modeling results and combining geometric programming The method calculates the number of prevention resources and recovery resources that each network node needs to allocate, so as to maximize the utility of defense resources. Through this method, when the network system suffers from APT attacks, the optimal network defense resource allocation scheme can be adopted to defend against APT attacks as soon as possible given certain defense resources, so that the losses caused by APT attacks can be minimized, thereby realizing network system The purpose of defending against APT attacks.

Description

technical field [0001] The invention relates to the field of network security dynamic systems, in particular to a method for optimal allocation of network defense resources aimed at advanced persistent threats. Background technique [0002] The rapid development of network information technology has brought huge changes to the productivity of today's society. More and more institutions, organizations, companies and governments are accelerating the development of their own network applications and service technologies. Today, as computer networks and software systems become increasingly complex, there are more and more corresponding vulnerabilities. Cybercriminals use these vulnerabilities to carry out cyber attacks on personal computers and even organizations to achieve political, economic and military goals. With the development of network technology, network attack methods are increasingly diversified, organized and persistent, and the attack surface is gradually extended ...

AI Technical Summary

Problems solved by technology

In the existing research, the mathematical model established for one-time network attack is static, and the mathematical model for the defense process of repetitive network attack is discrete, which cannot represent the interaction between the internal nodes of the network under different states. Therefore, in the existing research Mathematical models proposed for one-time or repeated cyber attacks are often not suitable for APT attacks

Secondly, the existing research mainly focuses on systems such as the spread of epidemics and malware propagation. The modeling process only considers the problem of internal infection, or assumes that the attacker is inside the network, and does not consider the impact of external attacks (such as APT attacks) on the system. to influence

Images