A tracking method of network survivability situation following dynamic game theory was proposed to improve the ability of real time performance evaluation and decision-making of network survivability. A modularized dynamic game evaluation model was given, which divided dynamic game process of attacker and protector into three phases, ie. resistance, recognition and recover. Then the mathematical description of dynamic game and the game tree expression of each phase game process aiming at survivability were constructed. A new income calculating scheme suitable for survivability situation awareness was proposed in final planar form. The simulations show that the proposed method enables to obtain the real time evaluation of network survivability according to the existing attacking and protecting data acquired from network system, which contains both the threat the network system encountered and the survivability of network itself. The network system's capability of survivability evaluation and decision-making is thus improved.%针对网络系统中可生存性能实时评估和生存决策能力的有效提高问题,提出了一种基于模块化动态博弈的网络可生存性态势跟踪方法.该方法根据提出的模块化动态博弈思想,将攻防双方的动态博弈过程分为抵抗、检测、容忍生存3个阶段,结合可生存性问题,给出了动态博弈的数学描述及3个生存阶段的动态博弈扩展式,将博弈收益量化结果转化为二维的可生存性态势评估结果.实验结果表明,该方法可依据网络现有的攻防数据,对网络系统遭遇的生存威胁,以及网络系统本身面对威胁的可生存能力进行实时跟踪评估,使网络系统的生存评估和决策能力得到了提高.
展开▼
