基于不完全信息动态博弈的入侵检测模型

基于风险决策的思想提出了一种全新的入侵检测模型，在不完全信息动态博弈分析的基础上研究入侵检测和入侵响应．把信息安全员与可疑用户节点作为非合作博弈的对立方，从博弈局中人的相互依赖的行动选择角度建立动态响应的博弈模型．通过引入DST方法用于模型中不确定性推理．实现了动态的行为空间与类型空间的概率映射问题．

Network Security Behavior Model Based on Dynamic Non-Cooperative Game Model with Incomplete Information

In this paper, a new idea of the design Intrusion detection system model was provided based on risk management, and we researched the intrusion detection and intrusion response using a dynamic non-cooperative games model with incomplete information. We regarded the information administrator and a suspicious network node as the two players in the games, and we build the model of the dynamic intrusion detection in the point of view that players in the games choose their actions depend on each other's action. We settled the probability mapping problem between the suspicious user's action and type by using D-S Theory in the uncertain reasoning part of the model.