Ad Hoc网络中基于重复博弈的攻击预测模型

摘要

大多数入侵检测系统预测攻击行为能力较弱,不能实时主动地响应攻击.针对该问题,提出一种基于重复博弈的攻击预测模型.通过建立入侵者和入侵检测系统之间的阶段博弈模型,给出阶段博弈的纳什均衡,并求出重复博弈情况下的子博弈精炼纳什均衡.使用QRE模型预测攻击者和防御者在博弈阶段1～t中选择各种策略的概率,利用Gambit分析得出预测结果.基于GloMoSim的仿真结果表明,相比纳什均衡模型,QRE均衡模型的预测效果更好.%Most Intrusion Detection System(IDS) are weak in real-time response attacker's action, so it can not predict attacker's action well. Aiming at the problem, this paper puts forward an attack prediction model between attacker and IDS based on repeated game. It establishes the stage game model with the two players and gives the Nash equilibrium, gets the unique sub-game perfect Nash equilibrium when the game plays infinity times and chalks up the probability of every strategy of two players in stage 1~ stage t according to the Quantal Response Equi!ibrium(QRE) model with the Gambit simulation. The model is simulated in Ad Hoc network by using the GloMoSim, whose results show that compared with Nash equilibrium model, QRE equilibrium model gains better prediction effect.