基于博弈论的网络攻防行为建模与态势演化分析

网络安全本质在对抗。针对现有研究缺乏从博弈视角分析网络攻防行为与态势演化关系的问题，该文提出一种网络攻防博弈架构模型(NADGM)，借鉴传染病动力学理论以不同安全状态网络节点密度定义网络攻防态势，分析网络节点安全状态转移路径；以网络勒索病毒攻防博弈为例，使用NetLogo多Agent仿真工具开展不同场景下攻防态势演化趋势对比实验，得出增强网络防御效能的结论。实验结果验证了模型方法的有效性和可行性。

Modeling of Network Attack and Defense Behavior and Analysis of Situation Evolution Based on Game Theory

The essence of network security is confrontation. In view of at the problem that the existing research lacks to analyze the relationship between network attack and defense behavior and situation evolution from the perspective of game, a Network Attack And Defense Game architecture Model (NADGM) is proposed, the theory of infectious disease dynamics is used to define the network attack and defense situation with the density of network nodes in different security states, and the network node security state transition path is analyzed; The network blackmail virus attack and defense game is taken as an example, and NetLogo multi-agent simulation tools is used to carry out comparative experiments of attack and defense situation evolution trend in different scenarios, and the conclusion of enhancing network defense effectiveness is obtained. The experimental results verify the effectiveness and feasibility of the model method.