智能电网安全策略切换判决算法设计

摘要

安全策略切换判决算法的设计面临着这样一对矛盾：效率与性能。如何在保证效率的条件下提高安全切换判决算法的性能是安全策略切换算法设计的一个难点。本文提出了一种基于网络辅助终端判决的安全策略切换判决算法，将网络QoS性能的评估交给网络端完成，有效的降低了终端的计算量，提高了效率。另外由于不同安全应用有着不同的QoS要求，因此本文充分考虑了安全应用的安全业务类型，在网络端针对四种不同业务类型分别设计了基于模糊逻辑的网络QoS得分计算方法，满足了安全应用的QoS需求。此外，本文充分考虑到这样一种情况：当前的网络状况不能代表未来的网络状况，而网络状况的变化一般呈现出一定的变化趋势。因此，本文利用当前的网络状态来预测未来的网络状况，为安全策略切换判决提供了更加全面的网络QoS信息。%Security strategy switch decision algorithm is faced with a contradiction: efficiency and perform-ance. How to improve the decision algorithms to ensure efficient performance under conditions of security strat-egy is difficult. This paper proposes a network assisted decision algorithm based on the judgment of the terminal security strategy, which will assess the performance of QoS to the network is completed, effectively reducing the amount of computation terminal and improve efficiency. Also due to the different security applications have dif-ferent QoS requirements, this type of full consideration of the security services security applications on the Grid network side for the four different types were designed by fuzzy logic score calculation method based on QoS to meet the security applications requirements. Additionally, this paper fully takes into account in such a situation: the current network status cannot represent the future of network conditions, and changes in network conditions generally show some trends. Therefore, using the current network status to predict future network conditions for security policy handover decision provides more comprehensive QoS information.