论文部分内容阅读
在网络安全态势感知报文总体收发速度不变的情况下,为降低对同一IP或连续IP地址段内目标的高频、高强度的感知行为,提出了一个网络安全态势感知的优化策略,该策略在经典Arnold置乱算法的基础上,结合公网连续IP地址段的特点,利用广义Arnold系数矩阵的灵活输出特性,对全网域IP地址进行混沌置乱的安全态势感知。与主流的随机扫描、段内扫描策略的感知方式相比,该策略不仅提高了对网络安全态势的整体感知效率,而且降低了对同一IP或连续IP地址段内目标的感知频率和强度。
In order to reduce the high-frequency and high-intensity perception of the target in the same IP or contiguous IP address segment under the condition that the overall speed of network context-aware message sending and receiving is the same, a strategy of network security situational awareness is proposed. Based on the classic Arnold scramble algorithm and the flexible output characteristics of the generalized Arnold coefficient matrix, combined with the characteristics of the continuous IP address segment in the public network, the security situation awareness of chaos in the entire domain IP address is given. This strategy not only improves the overall perceived efficiency of the network security posture, but also reduces the perceived frequency and strength of the target in the same IP or contiguous IP address segment compared with the mainstream random scanning and segment scanning strategy.