Moving target defense opportunity selection method and device based on covert confrontation

Abstract

The invention belongs to the field of network security, and particularly relates to a moving target defense opportunity selection method and a moving target defense opportunity selection device basedon covert confrontation. The moving target defense opportunity selection method comprises the steps of: analyzing an attack process based on a cyber kill chain; constructing an MTD network attack surface state migration model based on a SIRM infectious disease model; constructing an MTD attack and defense opportunity selection model based on time game; and performing game equilibrium solution on the MTD attack and defense opportunity selection model based on the time game, and selecting the optimal opportunity of the MTD. According to the moving target defense opportunity selection method, theoptimal equilibrium point of strategy implementation opportunities of an attacker and a defender is analyzed in a time game theory framework in accordance with a real network attack and defense scene, so that the MTD implementation opportunity is guided for the defender, and the SDN service quality and MTD decision income are balanced.

Description

technical field [0001] The invention belongs to the field of network security, in particular to a method and device for selecting a mobile target defense opportunity based on concealment confrontation. Background technique [0002] With the continuous development of advanced persistent threat (Advanced Persistent Threat, APT) and other network attack methods, Internet security is facing severe challenges. As a next-generation new network system, Software Defined Network (SDN) faces increasingly prominent security threats. Due to the centralized control of SDN, the SDN controller becomes a single-point attack target for attackers. At the same time, the southbound interface between the control layer and the data layer is also vulnerable to network attacks such as scanning detection, denial of service, and fraudulent implantation. , so it is urgent to analyze and predict security attack and defense behaviors in SDN. In order to solve the actual problems and potential threats ...

AI Technical Summary

Problems solved by technology

Game theory is an analysis tool for describing the interaction of decision-making subjects. As a game theory framework for modeling computer security scenarios, time games have been widely used in security attack and defense scenarios such as directional attack modeling, encryption key update, password policy change, and cloud auditing. However, few scholars have applied it to the research on the timing selection of moving target defense.

Images