论文部分内容阅读
为提高网络中系统在遭到恶意攻击情况下能够继续提供全部或降级的服务,对当前网络上入侵行为以及入侵容忍技术进行分析,提出一种测量容忍度的计算方法。在攻击不可避免的情况下,只要不超出度量值,使系统应能为合法用户提供有效的服务。根据网络系统进入不同的安全状态同时执行不同的安全策略,通过对模拟实验结果的评估,为不同的攻击行为所采取的容忍策略提供有效的帮助。研究结果表明,所提出的模型对于构建入侵容忍系统具有一定的指导意义。
To improve the system in the network can continue to provide all or degraded services in the case of malicious attacks on the current network intrusion and intrusion tolerance technology to analyze and propose a measurement tolerance measurement method. In the unavoidable case of an attack, the system should be able to provide valid services to legitimate users as long as the metrics are not exceeded. According to the network system entering different security states and executing different security strategies at the same time, the simulation results are evaluated to provide effective help for the tolerance strategies adopted by different aggressive behaviors. The results show that the proposed model is of guiding significance for the construction of intrusion tolerance system.