首页> 外文期刊>Personal and Ubiquitous Computing >Dynamically enabled defense effectiveness evaluation of a home Internet based on vulnerability analysis and attack layer measurement
【24h】

Dynamically enabled defense effectiveness evaluation of a home Internet based on vulnerability analysis and attack layer measurement

机译:基于漏洞分析和攻击层测量的动态启用的家庭互联网防御效能评估

获取原文
获取原文并翻译 | 示例
           

摘要

Smart devices in a home Internet, such as routers and cameras, suffer malicious attacks from hackers on a daily basis. Defenders should change system states dynamically to improve the system's defense ability. To quantify evaluation of defense effectiveness, this paper proposes an improved vulnerability scoring method for home Internets based on the Information Security Technology Security Vulnerability Classification Guide, which calculates a vulnerability score. A higher vulnerability score indicates weaker defense ability. This method only considers defense. In actual system attack and defense, the actions of attackers should also be considered. Therefore, a measurement method for the attack layer based on the Markov chain (MC) is proposed. This method builds a model of an attack layer that can assess whether the defender's dynamic defense is effective by calculating the factor attack layer detection probability P_d. To optimize computing process, this paper introduces stochastic Petri nets (SPN) so that the parameters of MC transition matrix are easily gained. This model also obtains the minimum time period △t, during which the defender must change system states. If the change time period is greater than △t, attackers increase their probability of hacking into the home Internet system. Finally, the study concludes that if the vulnerability scores are lower after the system states are changed, △t will become longer, meaning the home Internet system has enhanced defense ability.
机译:家庭互联网中的智能设备(例如路由器和摄像机)每天都会遭受黑客的恶意攻击。防御者应动态更改系统状态,以提高系统的防御能力。为了量化防御有效性的评估,本文基于《信息安全技术安全漏洞分类指南》提出了一种改进的家庭互联网漏洞评分方法,该方法计算了漏洞评分。较高的脆弱性得分表示防御能力较弱。此方法仅考虑防御。在实际的系统攻防中,还应考虑攻击者的行动。因此,提出了一种基于马尔可夫链(MC)的攻击层测量方法。该方法建立了攻击层模型,可以通过计算因子攻击层检测概率P_d评估防御者的动态防御是否有效。为了优化计算过程,本文引入了随机Petri网(SPN),从而易于获得MC转移矩阵的参数。此模型还获得了防御者必须更改系统状态的最小时间段△t。如果更改时间段大于△t,则攻击者会增加其入侵家庭Internet系统的可能性。最后,研究得出的结论是,如果在系统状态更改后漏洞评分较低,则△t将变长,这意味着家用Internet系统具有增强的防御能力。

著录项

  • 来源
    《Personal and Ubiquitous Computing》 |2018年第1期|153-162|共10页
  • 作者单位

    Information Security Center, Beijing University of Posts and Telecommunications, Beijing 100876, China,Guizhou Provincial Key Laboratory of Public Big Data, Guizhou University, Guiyang, Guizhou 550025, China,Jiangsu Engineering Center of Network Monitoring, Nanjing University of Information Science and Technology, Nanjing 210044, China;

    Information Security Center, Beijing University of Posts and Telecommunications, Beijing 100876, China,Guizhou Provincial Key Laboratory of Public Big Data, Guizhou University, Guiyang, Guizhou 550025, China;

    Information Security Center, Beijing University of Posts and Telecommunications, Beijing 100876, China,Guizhou Provincial Key Laboratory of Public Big Data, Guizhou University, Guiyang, Guizhou 550025, China;

    Information Security Center, Beijing University of Posts and Telecommunications, Beijing 100876, China,Guizhou Provincial Key Laboratory of Public Big Data, Guizhou University, Guiyang, Guizhou 550025, China;

    Information Security Center, Beijing University of Posts and Telecommunications, Beijing 100876, China,Guizhou Provincial Key Laboratory of Public Big Data, Guizhou University, Guiyang, Guizhou 550025, China;

    School of Mathematics and Computer Science, Guizhou Education University, Guiyang 550018, China;

  • 收录信息
  • 原文格式 PDF
  • 正文语种 eng
  • 中图分类
  • 关键词

    Home Internet; Dynamically enabled defense; Vulnerability score; Markov chain; Attack layer;

    机译:家庭互联网;动态启用防御;漏洞评分;马尔可夫链攻击层;

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号