静态贝叶斯博弈最优防御策略选取方法

doi:10.19665/j.issn1001-2400.2019.05.008

摘要/Abstract

摘要：

针对现有基于博弈理论的网络防御策略选取方法没有考虑攻防双方策略选取能力差异对博弈过程的影响和以概率的形式给出最优防御策略导致可操作性不强的问题,提出了一种基于静态贝叶斯博弈的最优防御策略选取方法。该方法从不完全信息角度对网络攻防过程进行建模;通过收敛度对攻防双方策略选取能力的差异进行量化;在对混合策略贝叶斯纳什均衡分析的基础上,对防御效能进行量化;以防御效能为标准进行最优防御策略的选取。通过实例分析验证了所提方法的合理性和可行性。与传统基于博弈理论的策略选取方法相比,该方法更加紧贴网络实际,具有更强的可操作性。

关键词: 静态贝叶斯博弈, 最优防御, 混合策略贝叶斯纳什均衡, 防御效能

Abstract:

Nowadays, the network optimal defense strategy selection based on the game theory has many disadvantages, such as ignoring the influence of strategy selection ability between attacker and defender, and choosing the defense strategy improperly in the form of probability. In order to solve the problem, an optimal defense strategy selection method based on the static Bayesian game is proposed. The network attack-defense process is modeled from the perspective of incomplete information. The difference of strategy selection ability between attacker and defender is quantified by the convergence degree. The defense effectiveness is quantified on the basis of mixed strategy Bayesian Nash equilibrium. The optimal defense strategy is selected that takes defense effectiveness as the criterion. The rationality and feasibility of the method proposed in this paper are verified via a representative example. Compared with the traditional strategy selection method based on the game theory, this method is more closely related to the actual network and has a greater operability.

Key words: static Bayesian game, optimal defense, mixed strategy Bayesian Nash equilibrium, defense effectiveness

中图分类号:

TP309

王增光,卢昱,李玺,李志伟. 静态贝叶斯博弈最优防御策略选取方法[J]. 西安电子科技大学学报, 2019, 46(5): 55-61.

WANG Zengguang,LU Yu,LI Xi,LI Zhiwei. Optimal defense strategy selection based on the static Bayesian game[J]. Journal of Xidian University, 2019, 46(5): 55-61.

图/表 4

表1

表2

不同类型攻击方策略"

攻击行动	冒险型攻击方			平衡型攻击方			保守型攻击方
攻击行动	$S 1 A$	$S 2 A$	$S 3 A$	$S 4 A$	$S 5 A$	$S 6 A$	$S 7 A$	$S 8 A$	$S 9 A$
Destroy database	√	√				√
Shutdown server			√		√
Send abnormal data			√		√	√			√
Remote buffer overflow		√		√			√		√
Steal or tamper with data	√	√			√	√
Steal account and crack it	√	√	√					√
UDP flood			√	√	√		√	√	√
TCP-SYN flood	√			√		√
Deface website			√	√				√
Install Trojan	√	√					√

表2

表3

图1

参考文献 12

[1]	ZHANG H W, JIANG L, HUANG S R , et al. Attack-defense Differential Game Model for Network Defense Strategy Selection[J]. IEEE Access, 2019,7:50618-50629.
[2]	HU H, LIU Y, ZHANG H , et al. Optimal Network Defense Strategy Selection Based on Incomplete Information Evolutionary Game[J]. IEEEAccess, 2018,6:29806-29821.
[3]	TOSH D, SENGUPTA S, KAMHOUA C A , et al. Establishing Evolutionary Game Models for Cyber Security Information Exchange[J]. Journal of Computer and System Sciences, 2018,98:27-52.
[4]	AFRAA A, CHATTERJEE M, ZOU C C. A Game Theoretic Approach to Model Cyber Attack and Defense Strategies[C]// Proceedings of the 2018 IEEE International Conference on Communications. Piscataway: IEEE, 2018: 8422719.
[5]	刘刚, 张宏, 李千目 . 基于博弈模型的网络安全最优攻防决策方法[J]. 南京理工大学学报, 2014,38(1):12-21.
	LIU Gang, ZHANG Hong, LI Qianmu . Network Security Optimal Attack and Defense Decision-making Method Based on Game Model[J]. Journal on Nanjing University of Science and Technology, 2014,38(1):12-21.
[6]	LI X, LU Y, NIE W . Network Security Situation Assessment Method Based on Markov Game Model[J]. KSII Transactions on Internet and Information Systems, 2018,12(5):2414-2428.
[7]	张恒巍, 余定坤, 韩继红 , 等. 信号博弈网络安全威胁评估方法[J]. 西安电子科技大学学报, 2016,43(3):137-143.
	ZHANG Hengwei, YU Dingkun, HAN Jihong , et al. Network Security Threat Assessment Based on the Signaling Game[J]. Journal of Xidian University, 2016,43(3):137-143.
[8]	SUN Y, XIONG W, YAO Z H , et al. Analysis of Network Attack and Defense Strategies Based on Pareto Optimum[J]. Electronics, 2018,7(3):246-269.
[9]	ZHANG N B . Defensive Strategy Selection Based on Attack-defense Game Model in Network Security[J]. International Journal of Performability Engineering, 2018,14(11):2633-2642.
[10]	DO C T, TRAN N H, HONG C , et al. Game Theory for Cyber Security and Privacy[J]. ACM Computing Surveys, 2017,50(2):30-37.
[11]	王晋东, 余定坤, 张恒巍 , 等. 静态贝叶斯博弈主动防御策略选取方法[J]. 西安电子科技大学学报, 2016,43(1):144-150. doi: 10.3969/j.issn.1001-2400.2016.01.026
	WANG Jindnog, YU Dingkun, ZHANG Hengwei , et al. Active Defense Strategy Selection Based on Static Bayesian Game[J]. Journal of Xidian University, 2016,43(1):144-150. doi: 10.3969/j.issn.1001-2400.2016.01.026
[12]	LI M, CAO J J . Network Attack Defense Awareness Based on Dynamic Game[J]. International Journal of Security and Its Applications, 2015,9(7):69-78.

文献方法	博弈假设	攻击方类型	防守方类型	收敛性	可操作性
文献[5]	完全信息	1	1	未考虑	一般
文献[6]	完全信息	1	1	未考虑	较差
文献[9]	不完全信息	1	N	未考虑	一般
文献[12]	不完全信息	1	1	未考虑	一般
文中方法	不完全信息	N	N	考虑	较好

[1]	葛滨,陈旭,陈刚. 向量运算加速的超混沌图像加密算法[J]. 西安电子科技大学学报, 2021, 48(6): 187-196.
[2]	代明军,李晓凤,邓海燕,陈彬. 具有低编解码复杂度的私有信息检索[J]. 西安电子科技大学学报, 2021, 48(6): 212-220.
[3]	谢丽霞,白宇. 一种信息系统业务波及影响评估方法[J]. 西安电子科技大学学报, 2021, 48(4): 184-191.
[4]	王省欣,胡伟,谭静,朱嘉诚,唐时博. AES相关故障注入攻击[J]. 西安电子科技大学学报, 2021, 48(4): 192-199.
[5]	宋成,金彤,倪水平,贺军义,杜守恒. 一种面向移动终端的K匿名位置隐私保护方案[J]. 西安电子科技大学学报, 2021, 48(3): 138-145.
[6]	何诗洋,李晖,李凤华. SM4算法的FPGA优化实现方法[J]. 西安电子科技大学学报, 2021, 48(3): 155-162.
[7]	王俊祥,黄霖,张影,倪江群,林朗. 低复杂度的增强图像来源检测算法[J]. 西安电子科技大学学报, 2021, 48(1): 96-106.
[8]	李腾,曹世杰,尹思薇,魏大卫,马鑫迪,马建峰. 应用Q学习决策的最优攻击路径生成方法[J]. 西安电子科技大学学报, 2021, 48(1): 160-167.
[9]	杨宏宇,曾仁韵. 一种深度学习的网络安全态势评估方法[J]. 西安电子科技大学学报, 2021, 48(1): 183-190.
[10]	车小亮,周昊楠,杨晓元,周潭平,刘龙飞,李宁波. 环LWE上高效的多密钥全同态加密方案[J]. 西安电子科技大学学报, 2021, 48(1): 87-95.
[11]	蓝怡琴,张方国,田海博. 利用门罗币实现隐蔽通信[J]. 西安电子科技大学学报, 2020, 47(5): 19-27.
[12]	司成祥,高峰,祝烈煌,巩国鹏,张璨,陈卓,李锐光. 一种支持动态标签的区块链数据隐蔽传输机制[J]. 西安电子科技大学学报, 2020, 47(5): 94-102.
[13]	黄昱铭,马建峰,刘志全,冯丙文,魏凯敏. 一种基于规则的自动程序修复方法[J]. 西安电子科技大学学报, 2020, 47(4): 117-123.
[14]	杨宏宇,张旭高. 一种网络安全态势自适应预测模型[J]. 西安电子科技大学学报, 2020, 47(3): 14-22.
[15]	杨路辉,刘光杰,翟江涛,刘伟伟,白惠文,戴跃伟. 一种改进的卷积神经网络恶意域名检测算法[J]. 西安电子科技大学学报, 2020, 47(1): 37-43.