Modeling Mental Attributions of Defense Decision of Networks Security Based on AML

摘要

Under the complex, dynamic and uncertain networks threat environment, the network defense decision must be made effectively so that the limited network defense resource, such as firewall, honeypot, reacting resource, etc., can be distributed effectively, the primary information asset can be protected and the mainly network part can be operated effectively. The mental attributions are the foundation of making network defense decisions. In this study, we try to model the mental attribution of the defense decision by means of visualization method, to establish a foundation for developing the network defense decision system. First, the mental factors of the automatics decision are classified from information, motivation and operation of the decision based on the requirements of networks security defense; and then, based on the traditional BDI-Agent (Belief, Desire and Intention), a BGP-Agent model is presented, which has the three types of mental attributions, i.e. the belief, goal and defense plan. Finally, the mental attributions of the network defense decision and the relationship among the mental attributions are modeled by the Agent diagram and the mental diagram with the Agent Modeling Language (AML).