北京航空航天大学学报 ›› 2008, Vol. 34 ›› Issue (01): 39-42.

• 论文 • 上一篇    下一篇

基于成本分析的入侵检测响应模型

董红1, 邱菀华1, 吕俊杰2   

  1. 1. 北京航空航天大学 经济管理学院, 北京 100083;
    2. 北京工商大学 商学院,北京 100037
  • 收稿日期:2007-01-22 出版日期:2008-01-31 发布日期:2010-09-17
  • 作者简介:董 红(1984-),女,山西运城人,博士生,hudie1998@163.com.
  • 基金资助:

    国家自然科学基金资助项目(70372011); 高校博士点专项科研基金资助项目(20030006009)

Intrusion detection response model based on cost-analysis

Dong Hong1, Qiu Wanhua1, Lü Junjie2   

  1. 1. School of Economics and Management, Beijing University of Aeronautics and Astronautics, Beijing 100083, China;
    2. School of Business, Beijing Technology and Business University, Beijing 100037, China
  • Received:2007-01-22 Online:2008-01-31 Published:2010-09-17

摘要: 运用博弈论及信息安全技术有关理论,提出了一个基于成本分析的入侵响应投资模型,得出在此安全技术配置下博弈双方的最优策略,讨论了入侵响应的纳什均衡解,并通过成本分析从理论和实践两方面验证了此模型的合理性.针对现有入侵响应系统中不计成本就进行响应的问题,引入入侵损失和响应成本,通过比较二者关系,分析了系统管理员进行响应的条件成本,从而给出系统管理员灵活调整入侵响应的自适应策略,提高信息系统的安全性及抵抗攻击的能力,且避免不必要的资源浪费,实现信息保护和资源可用之间的平衡.

Abstract: Applying the methodologies of game theory and network security, considering the decision interdependence of the players, a game model of intrusion response based on cost analysis was presented. The study showed the optimal strategies for the players in the deployment of security technique-Intrusion Detection System(IDS), discussed the Nash equilibrium solutions, and verified the model rationality by cost-analysis from the theoretic and empirical aspects. Focusing on the problem of intrusion response without considering cost now, the model was introduced damage cost and response cost. With comparison with the two kinds of cost, the conditional cost of responding was analyzed, thus an adaptive intrusion response strategy to system administrator was made. This method can illustrate the response policy of system administrator in the actual decision further, improve security and avoid wasting unnecessary resource, then achieve the balance between information protection and resource.

中图分类号: 


版权所有 © 《北京航空航天大学学报》编辑部
通讯地址:北京市海淀区学院路37号 北京航空航天大学学报编辑部 邮编:100191 E-mail:jbuaa@buaa.edu.cn
本系统由北京玛格泰克科技发展有限公司设计开发