基于博弈模型与NetLogo仿真的网络攻防态势研究

doi:10.16182/j.issn1004731x.joss.20-FZ0290

系统仿真学报 ›› 2020, Vol. 32 ›› Issue (10): 1918-1926.doi: 10.16182/j.issn1004731x.joss.20-FZ0290

基于博弈模型与NetLogo仿真的网络攻防态势研究

刘小虎, 张恒巍, 张玉臣, 马壮, 吕文雷

战略支援部队信息工程大学,河南郑州 450001

收稿日期:2020-02-18 修回日期:2020-06-02 出版日期:2020-10-18 发布日期:2020-10-14
作者简介:刘小虎(1989-),男,河南,博士生,讲师,研究方向为网络建模仿真;张恒巍(1978-),男,河南,博士,副教授,研究方向为网络安全博弈;张玉臣(1977-),男,河南,博士,副教授,研究方向为网络空间安全。

Research on Network Attack and Defense Situation Based on Game Theory Model and NetLogo Simulation

Liu Xiaohu, Zhang Hengwei, Zhang Yuchen, Ma Zhuang, Lü Wenlei

Strategic Support Force Information Engineering University, Zhengzhou 450001, China

Received:2020-02-18 Revised:2020-06-02 Online:2020-10-18 Published:2020-10-14

摘要/Abstract

摘要： 针对现有建模方法缺乏对攻防博弈行为与态势演化趋势的分析问题,从对抗角度出发分析网络攻防博弈特征;基于非合作不完全信息静态博弈理论建立网络攻防博弈模型,给出收益量化、博弈均衡计算和策略对抗结果判定方法;构建网络攻防博弈多Agent仿真模型;采用NetLogo开展局中人不同策略组合、不同初始数量等场景下的仿真实验,得出网络攻防态势随时间演化情况,通过对比分析仿真结果,给出扭转网络攻防态势的建议。

关键词: 网络攻防, 不完全静态信息博弈, 建模仿真, NetLogo

Abstract: Aiming at the problem that the existing modeling methods lack of the analysis on the behavior and trend of attack and defense game, the characteristics of network attack and defense game from the perspective of confrontation are analyzed Based on the static game theory of non- cooperative incomplete information, the network attack and defense game model is established, and the revenue quantification, game equilibrium calculation and decision-making of strategic confrontation result are given. The multi-agent simulation model of network attack and defense game is constructed. The simulation experiments under different strategy combinations and different initial numbers of players are carried out by using Netlogo. The evolution of network attack and defense situation with time is obtained. By comparing and analyzing the simulation results, some suggestions are given to reverse the network attack and defense situation.

Key words: network attack and defense, incomplete static information game, modeling and simulation, NetLogo

中图分类号:

TP393.08

刘小虎, 张恒巍, 张玉臣, 马壮, 吕文雷. 基于博弈模型与NetLogo仿真的网络攻防态势研究[J]. 系统仿真学报, 2020, 32(10): 1918-1926.

Liu Xiaohu, Zhang Hengwei, Zhang Yuchen, Ma Zhuang, Lü Wenlei. Research on Network Attack and Defense Situation Based on Game Theory Model and NetLogo Simulation[J]. Journal of System Simulation, 2020, 32(10): 1918-1926.

参考文献 18

[1]	方滨兴. 定义网络空间安全[J]. 网络与信息安全学报, 2018, 4(1): 1-5.Fang Binxing.Define cyberspace security[J]. Chinese Journal of Network and Information Security, 2018, 4(1): 1-5.
[2]	张明清, 刘小虎, 唐俊, 等. DDoS主动防御建模仿真研究[J]. 系统仿真学报, 2014, 26(11): 2698-2703.Zhang Mingqing, Liu Xiaohu, Tang Jun, et al.Study on Modeling and Simulation of DDoS Active Defense[J]. Journal of System Simulation, 2014, 26(11): 2698-2703.
[3]	张烙兵, 阮启明, 邱晓刚. 研究社会复杂系统的两种互补方法: 仿真与博弈论[J]. 系统仿真学报, 2019, 31(10): 1960-1969.Zhang Laobing, Ruan Qiming, Qiu Xiaogang.Two Complementary Methods for Studying Complex Social Systems: Simulation and Game Theory[J]. Journal of System Simulation, 2019, 31(10): 1960-1969.
[4]	刘文彦, 霍树民, 仝青, 等. 网络安全评估与分析模型研究[J]. 网络与信息安全学报, 2018(4): 1-11.Liu Wenyan, Huo Shumin, Tong Qing, et al.Research on models of network security evaluation and analysis[J]. Chinese Journal of Network and Information Security, 2018(4): 1-11.
[5]	杨英杰, 冷强, 常德显, 等. 基于属性攻击图的网络动态威胁分析技术研究[J]. 电子与信息学报, 2019, 41(8): 1838-1846.Yang Yingjie, Leng Qiang, Chang Dexian, et al.Research on Network Dynamic Threat Analysis Technology Based on Attribute Attack Graph[J]. Journal of Electronics and Information Technology, 2019, 41(8): 1838-1846.
[6]	Bryant B, Saiedian H.A novel kill-chain framework for remote security log analysis with SIEM software[J]. Computers & Security (S0167-4048), 2017, 6: 198-210.
[7]	杨林, 张义荣, 杨峰, 等. 基于攻击面度量的动态目标防御效能评估方法[J]. 指挥与控制学报, 2015, 1(4): 453-457.Yang Lin, Zhang Yirong, Yang Feng, et al.Performance Assessment Technique of Moving Target Defense Based on Attack Surface Measurement[J]. Journal of Command and Control, 2015, 1(4): 453-457.
[8]	Fudenberg D. Tirole J.Game Theory [M]. Boston: Massachusettes Institute of Technology Press, 2015.
[9]	杨峻楠, 张红旗, 张传富. 基于随机博弈与改进WoLF-PHC的网络防御决策方法[J]. 计算机研究与发展, 2019, 56(5): 942-954.Yang Junnan, Zhang Hongqi, Zhang Chuanfu.Network Defense Decision-Making Method Based on Stochastic Game and Improved WoLF-PHC[J]. Journal of Computer Research and Development, 2019, 56(5): 942-954.
[10]	Huang K X, Zhou C J, Qin Y Q, et al.A Game-Theoretic Approach to Cross-Layer Security Decision-Making in Industrial Cyber-Physical Systems[J]. IEEE Transactions on Industrial Electronics, 2020, 67(3): 2371-2379.
[11]	Liu X H, Zhang H W, Zhang Y C, et al.Active Defense Strategy Selection Method Based on Two-Way Signaling Game[J]. Security and Communication Networks (S1939-0122), 2019(2): 1-14.
[12]	Morgan F E, Gary W M, Michael N, et al.Gaming Space: A Game-Theoretic Methodology for Assessing the Deterrent Value of Space Control Options[M]. Santa Monica, CA: RAND Corporation, 2018.
[13]	Lo S M, Huang H C, Wang P, et al.A game theory-based exit selection model for evacuation[J]. Fire Safety Journal (S0379-7112), 2006, 41(5): 364-369.
[14]	姜伟, 方滨兴, 田志宏, 等. 基于攻防随机博弈模型的防御策略选取研究[J]. 计算机研究与发展, 2010(10): 1714-1723.Jiang Wei, Fang Binxing, Tian Zhihong, et al.Research on Defense Strategies Selection Based on Attack-Defense Stochastic Game Model[J]. Journal of Computer Research and Development, 2010(10): 1714-1723.
[15]	Zhang H W, Wang J D, Yu D K, et al.Security Defense Policy Selection Method Using the Game Theory of Incomplete Information[J]. China Communications (S1673-5447), 2015, 12(2): 123-131.
[16]	Sreenivasa M V.Analysis: Assessing Correlation between CVSS Scores in Vulnerability Disclosures and Patching[J]. Biomedical Instrumentation & Technology (S1943-5967), 2020, 54(1): 44-46.
[17]	Gordon L, Loeb M, Lucyshyn W, et al.2015 CSI/FBI computer crime and security survey[C]. Proceedings of the 2015 Computer Security Institute. SanFrancisco, USA: IEEE Press, 2015: 48-64.
[18]	NetLogo Homepage.[2018-01-07] .[2018-01-07] http://ccl.northwestern. edu/netlogo/

基于博弈模型与NetLogo仿真的网络攻防态势研究

Research on Network Attack and Defense Situation Based on Game Theory Model and NetLogo Simulation

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

参考文献 18

相关文章 15

编辑推荐

Metrics

本文评价

[1]	古鹏飞, 张霖, 陈真, 叶俊杰. 基于X语言的起飞场景民机协同设计与仿真一体化方法[J]. 系统仿真学报, 2022, 34(5): 929-943.
[2]	李伯虎, 柴旭东, 张霖, 卿杜政, 施国强, 林廷宇, 郭丽琴, 杨晨, 谷牧, 贾政轩, 公慧, 唐震. 面向智慧物联网的新型嵌入式仿真技术研究[J]. 系统仿真学报, 2022, 34(3): 419-441.
[3]	施国强, 刘泽伟, 林廷宇, 徐钊, 杨星熠, 郭丽琴, 贾政轩. 面向复杂产品建模与仿真系统的开放式云架构设计[J]. 系统仿真学报, 2022, 34(3): 442-451.
[4]	张霖, 王昆玉, 赖李媛君, 任磊. 基于建模仿真的体系工程[J]. 系统仿真学报, 2022, 34(2): 179-190.
[5]	赵柱, 王毅, 樊芮锋, 李丽亚, 祁蒙. 基于多主体NetLogo平台的反无人机OODA体系对抗建模[J]. 系统仿真学报, 2021, 33(8): 1791-1800.
[6]	郑菱莎, 姜兵, 赵喆, 杨朝旭. 航空复杂嵌入式系统时间性能仿真分析技术研究[J]. 系统仿真学报, 2021, 33(6): 1489-1499.
[7]	张霖, 陆涵. 从建模仿真看数字孪生[J]. 系统仿真学报, 2021, 33(5): 995-1007.
[8]	初阳, 刘志, 窦林涛. 面向大尺度战场的飞行机动建模仿真技术[J]. 系统仿真学报, 2021, 33(3): 613-621.
[9]	王强, 范秀敏, 何其昌, 朱文敏. 面向人机协作装配规划的AR仿真交互与人因评估[J]. 系统仿真学报, 2021, 33(2): 389-400.
[10]	王峻峰, 张玉帆, 邵瑶琪, 李世其. 面向生产性能数字孪生的仿真数据映射研究[J]. 系统仿真学报, 2021, 33(10): 2470-2477.
[11]	聂兴信, 白存瑞. 露天矿山奖惩策略有效性的仿真研究[J]. 系统仿真学报, 2020, 32(5): 946-955.
[12]	李锋, 魏莹. 小世界网络下病毒式信息传播的仿真分析[J]. 系统仿真学报, 2019, 31(9): 1790-1801.
[13]	郭勇陈, 沈洋. 中国海上能源通道安全性多主体建模与仿真[J]. 系统仿真学报, 2019, 31(4): 655-670.
[14]	张冰, 李欣, 万欣欣. 从数字孪生到数字工程建模仿真迈入新时代[J]. 系统仿真学报, 2019, 31(3): 369-376.
[15]	刘闻, 王晓路, 汪宏昇, 张恒, 王长庆. 基于Agent的低轨预警卫星星座探测仿真分析[J]. 系统仿真学报, 2019, 31(11): 2413-2421.