【作者】 丁文斌；

【导师】 李斌；

【作者基本信息】 哈尔滨工业大学 ， 计算机科学与技术， 2006， 硕士

【摘要】 本文围绕如何对入侵容忍系统进行分析进行研究,主要研究了入侵容忍的基本理论以及入侵容忍系统的模型,提出改进的模型;分析了现在的入侵容忍的评价方法以及存在的缺点,提出了使用扩展状态图和Petri网对入侵容忍系统进行分析。本文首先总结了目前主要的入侵容忍系统的理论,根据这些理论提出了入侵容忍系统的改进模型,它是在原有的模型上对系统的状态进行了细化,主要增加了机器学习模块产生了机器学习状态,攻击细化为流量攻击和弱点攻击。讨论了目前对入侵容忍系统的分析方法,大多采取抽象状态图的分析方法,但是状态图只能刻画系统的整体行为,分析出的结果概括,不能细致的分析出系统的性能,因此本文提出一种扩展的状态图分析方法,用更加细化的状态扩展原来的状态图,对传统分析方法和扩展的状态图分析方法的分析结果进行了比较。但是由于这种扩展的状态图分析方法较复杂,而且也不能细致的描述具体系统的一些具体的特性,因此提出使用基于SPN的分析方法,基于SPN的分析方法能够非常细致的刻画具体系统,非常真实的描述系统的行为。利用此方法对改进的模型和一个实际的系统分别进行SPN的建模,并且利用SPNP模拟软件对SPN进行了分析,得出了系统的性能指标,并且对实验结果进行了分析和总结。最后提出了如何更好的对入侵容忍系统进行分析,以及今后需要继续研究了一些问题。更多还原

【Abstract】 This dissertation focuses on the problems how to analyze the security of intrusion tolerance systems, especially researched the theory and the model of intrusion tolerance, put forward an improved model of intrusion tolerance system; We analyzed the method of the security analysis of intrusion tolerance system and its disadvantages, put forward using extended state transition diagram and Petri net to analyze intrusion tolerance systems.In the dissertation, we summarized the theory of intrusion systems at first, due to this theory, we put forward improved model of intrusion tolerance systems, which describes the states of systems in detail based on current model. In the new model, we mainly added the state of machine learning, and the state of attract is divided into flow attack and vulnerability attack.Then, we discussed the current method of security analysis of intrusion tolerance systems, which is state transition diagram. But state transition diagram can only describe the action of whole system, the result is very particular, so we put forward a new method, named extended state transition diagram, that can describe systems in detail, and then we compared these two results.The disadvantage of extended state transition diagram is very complex, so we used Petri net to analyze systems. Petri net has many virtues. It can easily describe the actions of systems. We used simulation tool, named SPNP, to analyze Petri net.At last, we analyzed the problems of the security analysis of intrusion tolerance system, which should be researched in the future. diagram更多还原