基于访问策略控制的主动式网络信息安全应急联动模型

An Active Network Information Security Emergency Linkage Model Based on Access Policy Control

摘要:

为了应对网络信息安全事件，最大程度的降低入侵攻击对网络信息产生的负面影响，降低网络信息丢包率和错误率，提出基于访问策略控制的主动式网络信息安全应急联动模型。捕获主动式网络数据包，以此作为模型的输入项。采用特征提取与匹配的方式，检测网络信息的安全状态，根据状态检测结果判断模型程序是否启动。根据网络攻击信号的强度特征，追踪主动式网络信息攻击源与路径，从网络节点功率、节点容量、资源可用性等方面设置模型约束条件，通过访问策略控制、信息攻击防御、信息恢复三个步骤，实现模型主动式网络信息安全应急联动功能。通过模型验证实验得出结论:与传统应急联动模型相比，在优化设计模型作用下，主动式静态网络和动态网络的丢包率分别降低3.04%和3.53%，网络信息错误率分别减小5.445%和6.07%，由此证明优化设计的安全应急联动模型具有更高的应用价值。

Abstract:

In order to respond to network information security incidents, minimize the negative impact of intrusion attacks on network information, and reduce the packet loss and error rates of network information, an active network information security emergency linkage model based on access policy control is proposed. Capture active network packets as input to the model. By using feature extraction and matching, the security status of network information is detected, and the model program is determined whether to start based on the state detection results. Based on the strength characteristics of network attack signals, track the source and path of active network information attacks, set model constraints from network node power, node capacity, resource availability, and other aspects, and achieve the model"s active network information security emergency linkage function through three steps: access policy control, information attack defense, and information recovery. Through model validation experiments, it was concluded that compared with traditional emergency linkage models, under the optimized design model, the packet loss rates of active static networks and dynamic networks were reduced by 3.04% and 3.53%, respectively, and the network information error rates were reduced by 5.445% and 6.07%, respectively. This proves that the optimized design of the security emergency linkage model has higher application value.