指挥信息系统应用层攻击效能模糊综合评估方法

doi:10.3969/j.issn.1000-1093.2020.05.012

摘要/Abstract

摘要： 指挥信息系统的服务共享和开放导致其面临更多的服务资源毁伤和信息欺骗攻击风险，有效的攻击风险评估亟待解决。针对指挥信息系统应用层攻防中信息不完备性和不确定性带来的攻击效能评估困难问题，建立指标因素数量为2+5+17的指挥信息系统应用层攻击3级评估指标体系，提出双因子主观、客观赋权法确定评估指标权重，应用反向传播人工神经网络理论建立具有学习机制和持续改进能力的模糊隶属函数，设计了单一攻击效能和多种攻击效能的模糊综合评估方法。实验结果表明：该方法不仅能够实现单一攻击效果的模糊量化和多种攻击的模糊排序，而且指标集更完整、赋权方法更综合、模糊隶属函数更具适用性。

关键词: 指挥信息系统, 应用层攻击, 人工神经网络, 模糊综合评估, 攻击效能

Abstract: The service sharing and opening of command information system lead to more service resource damages and information spoofing risk in its application layer attack. For difficult effectiveness evaluation problem due to the incomplete information and uncertainty in offensive and defensive attack of application layer of command information system, a three-level evaluation index system with index factor number of 2+ 5+17 is established for application layer attack of command information system. A two-factor subjective and objective weighting method is presented to determine the evaluation index weights. The theory of BP artificial neural network is used to establish the fuzzy membership function with learning mechanism and continuously improved capability. A fuzzy comprehensive evaluation method is designed for the single attack efficiency and a variety of attack effectiveness. The experimental results show that the proposed method can be used not only to achieve the fuzzy quantization of single attack effect and fuzzy ranking of multiple attacks, but also have more complete index set, more comprehensive weighting method and more applicable fuzzy membership function. Key

Key words: commandinformationsystem, applicationlayerattack, artificialneuralnetwork, fuzzycomprehensiveevaluation, attackeffectiveness

中图分类号:

TP393.081

黄迎春，牟鑫明. 指挥信息系统应用层攻击效能模糊综合评估方法[J]. 兵工学报, 2020, 41(5): 932-940.

HUANG Yingchun， MOU Xinming. A Fuzzy Comprehensive Evaluation Method for Attack Effectiveness of the Application Layer of Command Information System[J]. Acta Armamentarii, 2020, 41(5): 932-940.

参考文献

［1］路云飞, 李琳琳, 张壮, 等. 新一代指挥控制系统信息化能力分析与评估[J]. 计算机科学, 2018, 45(11A): 549-552.
LU Y F, LI L L, ZHANG Z, et al. Information capability analysis and evaluation of new generation command and control system computer engineering and applications[J]. Computer Science, 2018, 45(11A): 549-552. (in Chinese)
[2］徐志伟, 曾琛, 朝鲁, 等. 面向控域的体系结构:一种智能万物互联的体系结构风格[J]. 计算机研究与发展, 2019, 56(1): 94-106.
XU Z W, ZENG C, CHAO L, et al. Zone-oriented architecture: an architectural style for smart web of everything[J]. Journal of Computer Research and Development, 2019, 56(1): 94-106. (in Chinese)
[3］柏晓辉, 柏晓莉, 易先清. 面向服务的C⁴ISR系统仿真应用集成研究[J]. 系统工程与电子技术, 2010, 32(4): 784-790.
BAI X H, BAI X L, YI X Q. Study on service-oriented C⁴ISR simulation application integration[J]. Systems Engineering and Electronics, 2010, 32(4): 784-790. (in Chinese)
[4］曾艳阳, 康凤举, 张建春. 一种基于SOA的指控仿真系统的分层体系结构[J]. 系统仿真学报, 2011, 23(8): 1714-1718.
ZENG Y Y, KANG F J, ZHANG J C. Layered command and control simulation system architecture based on SOA[J]. Journal of System Simulation, 2011, 23(8): 1714-1718. (in Chinese)
[5］陈志锋, 李清宝, 张平, 等. 面向Linux的内核级代码复用攻击检测技术[J]. 软件学报, 2017, 28(7): 1732-1745.
CHEN Z F, LI Q B, ZHANG P, et al. Kernel code reuse attack detection technique for Linux[J]. Journal of Software, 2017, 28(7): 1732-1745. (in Chinese)
[6］谢柏林, 余顺争. 基于应用层协议分析的应用层实时主动防御系统[J]. 计算机学报, 2011, 34(3): 452-463.
XIE B L, YU S Z. Application layer real-time proactive defense system based on application layer protocol analysis[J]. Chinese Journal of Computers, 2011, 34(3): 452-463. (in Chinese)
[7］钱亚冠, 卢红波, 纪守领, 等. 一种针对基于SVM入侵检测系统的毒性攻击方法[J]. 电子学报, 2019, 47(1):59-65.
QIAN Y G, LU H B, JI S L, et al. A poisoning attack on intrusion detection system based on SVM[J]. Acta Electronica Sinica, 2019, 47(1): 59-65. (in Chinese)
[8］ ZHANG X, ZHANG X, QI Y, et al. Security evaluation for wireless sensor networks based on attack test and fuzzy comprehensive judgement[J]. Lecture Notes in Electrical Engineering, 2014, 295: 81-92.
[9］金菊良, 魏一鸣, 丁晶. 基于改进层次分析法的模糊综合评价模型[J]. 水利学报, 2004, 35(3): 65-70.
JIN J L, WEI Y M, DING J. Fuzzy comprehensive evaluation model based on improved analytic hierarchy process[J]. Journal of Hydraulic Engineering, 2004, 35(3): 65-70. (in Chinese)

[10］王会梅, 江亮, 鲜明, 等. 计算机网络攻击效果灰色评估模型和算法[J]. 通信学报, 2009, 30(11A): 17-22.
WANG H M, JIANG L, XIAN M. Grey evaluation model and algorithm of network attack effectiveness[J]. Journal on Communications, 2009, 30(11A): 17-22. (in Chinese)
[11］黄亮, 冯登国, 连一峰, 等. 一种基于多属性决策的DDoS防护措施遴选方法[J]. 软件学报, 2015, 26(7): 1742-1756.
HUANG L, FENG D G, LIAN Y F, et al. Method of DDoS countermeasure selection based on multi-attribute decision making[J]. Journal of Software, 2015, 26(7): 1742-1756. (in Chinese)
[12］黄亮, 冯登国, 连一峰, 等. 基于神经网络的DDoS防护绩效评估[J]. 计算机研究与发展, 2013, 50(10): 2100-2108.
HUANG L, FENG D G, LIAN Y F, et al. Artificial-neural-network-based DDoS defense effectiveness evaluation[J]. Journal of Computer Research and Development, 2013, 50(10): 2100-2108. (in Chinese)
[13］ CHO J, LEE J. Development of a new technology product evaluation model for assessing commercialization opportunities using Delphi method and fuzzy AHP approach[J]. Expert Systems with Applications, 2013, 40(13):5314-5330.
[14］ METIN D, I·HSAN Y. Developing a fuzzy analytic hierarchy process (AHP) model for behavior-based safety management[J]. Information Sciences, 2008, 178(6): 1717-1733.
[15］吕跃进. 基于模糊一致矩阵的模糊层次分析法的排序[J]. 模糊系统与数学, 2002, 16(2): 79-85.
L Y J. Weight calculation method of fuzzy analytical hierarchy process[J]. Fuzzy Systems and Mathematics, 2002, 16(2): 79- 85. (in Chinese)
[16］李雄伟, 于明, 杨义先, 等. Fuzzy-AHP法在网络攻击效果评估中的应用[J]. 北京邮电大学学报, 2006, 29(1): 124-127.
LI X W, YU M, YANG Y X, et al. Application of fuzzy-AHP method in the effect evaluation of network attack[J]. Journal of Beijing University of Posts and Telecommunications, 2006, 29(1): 124-127. (in Chinese)
[17］田钦谟. 模糊综合评价中的若干问题[J]. 模糊系统与数学, 1996(2): 62-69.
TIAN Q M. Several problems in fuzzy comprehensive evaluation[J]. Fuzzy Systems and Mathematics, 1996(2): 62-69. (in Chinese)
[18］郭严赞，季新生，刘彩霞，等. 一种基于模糊综合评价的IMS网络攻击后果评估方法［J］. 计算机应用研究，2013，30（11）： 3400-3403，3406.
GUO Y Z, JI X S, LIU C X, et al. Evaluation method for IMS network attack effect based on fuzzy comprehensive evaluation[J]. Application Research of Computers, 2013, 30(11): 3400-3403，3406. (in Chinese)

[19］ DING S, SU C, YU J. An optimizing BP neural network algorithm based on genetic algorithm[J]. Artificial Intelligence Review, 2011, 36(2): 153-162.
[20］冯永新, 赵运弢, 苏广楠, 等. 一种SOAP泛洪攻击效能模糊评估方法[J]. 兵工学报, 2015, 36(11): 2203-2208.
FENG Y X, ZHAO Y T, SU G N, et al. A fuzzy efficiency eva-luation method for soap flooding attack[J]. Acta Armamentarii, 2015, 36(11): 2203-2208. (in Chinese)
[21］常帅, 孙一品, 王勇军, 等. 网络攻击源威胁行为评估方法研究[J]. 小型微型计算机系统, 2015, 36(1): 121-125.
CHANG S，SUN Y P，WANG Y J, et al. Study of evaluation method for the threatening behavior of network attacker[J]. Journal of Chinese Computer Systems, 2015, 36(1): 121-125. (in Chinese)

第41卷第5期2020 年5月
兵工学报ACTA ARMAMENTARII
Vol.41No.5May2020

[1]	辛大钧，薛琨. 基于人工神经网络的非球形破片阻力系数预测模型[J]. 兵工学报, 2022, 43(5): 1083-1092.
[2]	田相轩，李军旗，金丽亚，刘正仁，石志强. 基于相关性分析的指挥信息系统模拟数据集可用性评估算法[J]. 兵工学报, 2021, 42(2): 399-407.
[3]	刘婧婷，郭继坤，邵芳. 基于统一体系结构框架的战区联合作战后勤与装备保障指挥信息系统架构[J]. 兵工学报, 2021, 42(2): 408-421.
[4]	江伟华，童峰，王彬，刘世刚. 采用主分量分析的非合作水声通信信号调制识别[J]. 兵工学报, 2016, 37(9): 1670-1676.
[5]	卢言利，穆景阳. 基于遗传BP神经网络的隐身涂层老化性能评价模型[J]. 兵工学报, 2015, 36(8): 1580-1586.
[6]	冯永新，赵运弢，苏广楠，黄迎春. 一种SOAP泛洪攻击效能模糊评估方法[J]. 兵工学报, 2015, 36(11): 2203-2208.
[7]	王义强，闫国琛，袁修华，谷岩，杨林霖. 圆环面铣刀高速铣削S50C模具钢的工艺参数研究[J]. 兵工学报, 2014, 35(7): 1091-1096.
[8]	罗宏浩，廖自力. 基于神经网络的内置式永磁电动机弱磁区最佳电流相位曲线拟合[J]. 兵工学报, 2012, 33(7): 870-874.
[9]	罗宏浩，王福兴. 考虑交叉耦合效应的内置式永磁电机最佳电流相位角[J]. 兵工学报, 2011, 32(8): 926-930.
[10]	孟广伟，沙丽荣₂，李锋₂，李广博₂. 基于神经网络的结构疲劳可靠性优化设计[J]. 兵工学报, 2010, 31(6): 765-769.
[11]	杨多和，安伟光，李铁钓. 基于人工神经网络的结构可靠性分析[J]. 兵工学报, 2007, 28(4): 495-498.
[12]	!:杨绍奎，张福田;2:孟惠荣. 履带车辆行星变速装置复合框架强度可靠度计算的智能仿真算法[J]. 兵工学报, 1999, 20(3): 198-203.
[13]	祝奇、郑链、王克勇. 基于三阶相关量的目标图像不变性识别技术[J]. 兵工学报, 1999, 20(1): 39-42.
[14]	孔繁森等. 求无颤振切削参数值的神经网络方法[J]. 兵工学报, 1998, 19(4): 335-338.
[15]	栗苹、施聚生. 人工神经网烙在目标声定向中的应用[J]. 兵工学报, 1995, 16(3): 28-31.