Active Defense Strategy Selection of Military Information Network Based on Incomplete Information Game

doi:10.3969/j.issn.1000-1093.2020.03.022

Abstract

Abstract: The characteristics of attack-defense confrontation behavior of military information network are analyzed for its defense strategy of military information network, and a method for selecting an active defense strategy is proposed. A network attack-defense game model is constructed based on incomplete information game. And the attack-defense payoffs are quantified from the perspective of network security attributes. An active defense strategy selection algorithm is proposed by taking the defense effectiveness as the criterion of strategy selection. Compared with the classical network defense method based on game theory, the proposed method is more suitale for network attack and defense practice in model design and payoff quantification. At the same time, the active defence strategy can be selected in the form of pure strategy, which is easier to understand and operate than the current optimal strategy selection in the form of probability. The rationality and feasibility of the proposed method are verified through a representative experiment, and the general rules of network defense are summarized through the analysis of defense payoffs.Key

Key words: militaryinformationnetwork, incompleteinformationgame, activedefense, strategyselection, defenseefficiency

CLC Number:

TP393.081

WANG Zengguang， LU Yu, LI Xi. Active Defense Strategy Selection of Military Information Network Based on Incomplete Information Game[J]. Acta Armamentarii, 2020, 41(3): 608-617.

References

［1］邢焕革, 周厚顺, 周浩, 等.网络中心战与联盟作战［M］. 北京：电子工业出版社, 2013.
XING H G, ZHOU H S, ZHOU H, et al. Network centric warfare and coalition operations ［M］.Beijing:Publishing House of Electronics Industry,2013.(in Chinese)
［2］王增光, 卢昱，李玺.基于攻防博弈的军事信息网络安全风险评估［J］.军事运筹与系统工程, 2019, 33(2):35-40,47.
WANG Z G, LU Y, LI X. Risk assessment of military information network security based on attack and defense game ［J］. Military Operations Research and Systems Engineering, 2019, 33(2):35-40, 47. (in Chinese)
［3］李军, 李韬.基于贝叶斯序贯博弈模型的智能电网信息物理安全分析［J］.自动化学报, 2019, 45(1):98-109.
LI J, LI T. Cyber-physical security analysis of smart grids with Bayesian sequential game models ［J］. Acta Automatica Sinica, 2019, 45(1):98-109. (in Chinese)
［4］刘景玮, 刘京菊，陆余良，等.基于网络攻防博弈模型的最优防御策略选取方法［J］.计算机科学, 2018, 45(6):117-123.
LIU J W, LIU J J, LU Y L, et al. Optimal defense strategy selection method based on network attack-defense game model ［J］. Computer Science, 2018, 45(6):117-123. (in Chinese)
［5］陈侠, 刘敏, 胡永新.基于不确定信息的无人机攻防博弈策略研究［J］. 兵工学报, 2012,33(12):1510-1515.
CHEN X, LIU M, HU Y X. Study on UAV offensive/defensive game strategy based on uncertain information ［J］. Acta Armamentarii, 2012, 33(12):1510-1515. (in Chinese)
［6］ ZHANG N B. Defensive strategy selection based on attack-defense game model in network security ［J］. International Journal of Performability Engineering, 2018, 14(11):2633-2642.
［7］ LI X, LU Y, LIU S, et al. Network security situation assessment method based on Markov game model ［J］. KSII Transactions on Internet and Information Systems, 2018, 12(5):2414-2428.
［8］张健, 王晋东, 张恒巍.静态贝叶斯博弈在信息系统风险分析中的应用［J］.计算机工程与应用, 2015,51(11):76-82.
ZHANG J, WANG J D, ZHANG H W. Application of static Bayesian game in information system risk analysis ［J］. Computer Engineering and Applications, 2015,51(11):76-82. (in Chinese)
［9］刘江, 张红旗, 刘艺.基于不完全信息动态博弈的动态目标防御最优策略选取研究［J］.电子学报, 2018, 46(1):82-89.
LIU J, ZHANG H Q, LIU Y. Research on optimal selection of moving target defense policy based on dynamic game with incomplete information ［J］.Acta Electronica Sinica, 2018, 46(1):82-89. (in Chinese)

［10］王增光,卢昱,李玺,等.静态贝叶斯博弈最优防御策略选取方法［J］.西安电子科技大学学报,2019,46(5):55-61.
WANG Z G, LU Y, LI X, et al. Optimal defense strategy selection based on the static Bayesian game［J］.Journal of Xidian University, 2019, 46(5):55-61.(in Chinese)
［11］胡永进, 马骏, 郭渊博.基于博弈论的网络欺骗研究［J］.通信学报, 2018, 39(增刊2):9-18.
HU Y J, MA J, GUO Y B. Research on cyber deception based on game theory ［J］.Journal on Communications, 2018, 39(S2): 9-18. (in Chinese)
［12］王晋东，余定坤，张恒巍，等.静态贝叶斯博弈主动防御策略选取方法［J］. 西安电子科技大学学报,2016,43(1):144-150.
WANG J D, YU D K,ZHANG H W, et al. Active defense strategy selection based on static Bayesian game［J］.Journal of Xidian University, 2016,43(1):144-150. (in Chinese)
［13］弭乾坤, 吴斌, 杜宁，等.基于不完全信息博弈模型的信息系统安全风险评估方法［J］.计算机与现代化, 2019(4):118-126.
MI Q K, WU B, DU N, et al. Information system security risk assessment based on incomplete information game model ［J］. Computer and Modernization, 2019(4):118-126. (in Chinese)
［14］ DO C T, TRAN N H, HONG C, et al. Game theory for cyber security and privacy［J］.ACM Computing Surveys, 2017, 50(2):1-37.
［15］刘宗谦，王峰.多重均衡选择中风险占优与混合策略［J］.数学的实践与认识, 2005, 35(5):216-224.
LIU Z Q, WANG F. Risk dominance in multi-equilibrium selection and mixed strategy ［J］. Journal of Mathematics in Practice and Theory, 2005, 35(5):216-224. (in Chinese)
［16］刘景玮, 刘京菊, 陆余良, 等.基于网络攻防博弈模型的最优防御策略选取方法［J］.计算机科学, 2018, 45(6):117-123.
LIU J W, LIU J J, LU Y L, et al. Optimal defense strategy selection method based on network attack-defense game model ［J］. Computer Science, 2018, 45(6):117-123. (in Chinese)
［17］ AFRAA A, MAINAK C, CLIFF C. A game theoretic approach to model cyber attack and defense strategies［C］∥Proceedings of 2018 IEEE International Conference on Communications. Kansas City, MO, US: IEEE, 2018:246-253.

第41卷
第3期2020 年3月兵工学报ACTA
ARMAMENTARIIVol.41No.3Mar.2020

[1]	WANG Gang, WANG Zhiyi, ZHANG Enning, MA Runnian, CHEN Tongrui. Markov Evolutionary Game Model and Migration Strategies for Multi-stage Platform Dynamic Defense [J]. Acta Armamentarii, 2021, 42(8): 1690-1697.
[2]	HUANG Yingchun， MOU Xinming. A Fuzzy Comprehensive Evaluation Method for Attack Effectiveness of the Application Layer of Command Information System [J]. Acta Armamentarii, 2020, 41(5): 932-940.
[3]	WU Tianhao， WANG Jingsong， NIU Kan， SUN Miao， WU Shaoqiang. Adaptive Dynamic Indicators Configuration Method for Dealing with Electromagnetic Interference in Battlefield [J]. Acta Armamentarii, 2019, 40(8): 1648-1657.
[4]	LI Eryu, GONG Jianxing, HUANG Jian. Analysis about Functional Invulnerability of Convergent Network Based on Function Chain [J]. Acta Armamentarii, 2019, 40(7): 1450-1459.
[5]	LI Xiaohang， ZHANG Zhihu， SONG Chunlin， WU Qiang， DONG Fangyong. Adaptive Compensation Control under False Data Injection Attack [J]. Acta Armamentarii, 2020, 41(11): 2260-2265.