基于随机博弈模型的网络攻防策略选取

针对网络攻防过程中无法有效应对攻击意图与策略变化的问题，提出一种基于随机博弈模型的网络安全攻防策略选取方法.将网络安全攻防理解为二人随机博弈问题，以主机脆弱性信息为基础，结合主机重要度与防御措施成功率，生成单一安全属性攻防收益值，根据攻防意图对整体攻防收益进行量化.在此基础上，给出攻防均衡策略选取算法.实例分析表明，所研究的模型与算法在攻防策略选取方面合理、可行.

Network Attack-Defense Strategies Selection Based on Stochastic Game Model

Game theory was applied on network defense very well. And static model was used widely in most of the previous studies. However, there shows that such models have not take attack-defense cost into consideration and also cannot follow the evolving of the intention and strategies of attacks. A stochastic game model is proposed based on host vulnerability information. Combining host important degree and success rate of defense measures, attack-defense cost in single security attribute is analyzed, then a cost quantitative method with attack-defense intention is provided. An algorithm for attack-defense equilibrium strategy selection based on those models is proposed. Another example is given to illustrate the efficacy of this model and algorithm.