DOS attack and defense simulation method based on random Petri network

Abstract

The invention relates to a DOS attack and defense simulation method based on a random Petri network. The method comprises the following steps of 1, constructing a system defense model of a colored Petri network under DOS attack by using the colored Petri network; 2, constructing a system defense model under the DOS attack, wherein the model comprises the following modules of an attack simulation module, an attack detection module, a resource restoration module and a strategy implementation module; 3, calculating the average availability of the system. According to the invention, the system defense modeling under DOS attack is carried out by using the colored Petri network, and the modules are divided into the attack simulation module, the attack detection module, the resource restoration module and the strategy implementation module, so that the complete defense process of the system under the DOS attack is well achieved, the defense details of the system under the DOS attack are displayed, and the established model can objectively reflect the availability of the system under the known parameters.

Description

Technical field: [0001] The invention relates to computer system safety protection technology, in particular to a DOS attack and defense simulation method based on random Petri net. Background technique: [0002] Denial of Service (DoS) is the most common type of network attacks. The attacker sends flood-level data packets to the network or target host in a short period of time, occupying a large amount of network bandwidth and consuming target processing resources. When normal users communicate on the network, abnormal requests or service errors will occur, and the normal communication quality of the network will be threatened. DoS attack is simple and effective, and it has seriously affected the normal operation of the network. It is a research focus in the field of network security. [0003] At present, scholars have used Petri nets to model network attacks. Huang Guangqiu et al. proposed a set of network attack modeling methods based on fuzzy Petri nets. Based on the fu...

AI Technical Summary

Problems solved by technology

The existing system defense model under DOS attack fails to show the system defense process and details well, and does not simultaneously consider the system's attack detection function, system self-repair function, and system ability to identify attacks and generate corresponding defense strategies

Images