基于SPEA-Ⅱ算法的网络多层次安全访问控制方法

Multi-level network security access control method based on SPEA-Ⅱ algorithm

摘要:

当前网络技术迅猛发展,网络安全问题日益突出,尤其是访问控制安全性。为了解决目前网络系统中存在的威胁检测精度和安全访问控制问题,引入SPEA-II算法,提出一种新的网络多层次安全访问控制方法。深入分析网络多层次访问控制机制原理,明确安全访问控制目标。结合网络边界区域、传输信道区域、移动终端设备区域,建立边界访问控制目标函数、安全威胁检测目标函数、用户身份认证目标函数,提高网络系统安全威胁检测精度。利用SPEA-Ⅱ算法对联合目标函数进行求解,获取网络多层次安全访问控制机制最佳方案。通过迭代逐渐接近近似最优解集,建立最优安全策略组合,计算攻击流量因子完成网络多层次安全访问控制。实验结果表明,所提方法的网络多层次威胁检测精度为94%,安全评估为0.96。由此证明,所提方法的网络多层次安全访问控制效果较好,具有较强的安全性和适应性,能够为中移互联网领域的网络安全策略提供技术支持。

Abstract:

At present, with the rapid development of network technology, network security issues are increasingly prominent, especially access control security. In order to solve the problems of threat detection accuracy and security access control in current network systems, SPEA-II algorithm is introduced, and a new network multi-level security access control method is proposed. In-depth analysis of the principle of network multi-level access control mechanism, clear security access control objectives. Combined with the network boundary area, transmission channel area and mobile terminal equipment area, the boundary access control objective function, security threat detection objective function and user identity authentication objective function are established to improve the security threat detection accuracy of the network system. SPEA-II algorithm is used to solve the joint objective function, and the best scheme of network multi-level security access control mechanism is obtained. Through iteration, the approximate optimal solution set is gradually approached, the optimal security policy combination is established, and the attack traffic factor is calculated to complete the multi-level security access control of the network. The experimental results show that the detection accuracy of the proposed method is 94% and the security assessment is 0.96. This proves that the multi-level network security access control effect of the proposed method is good, with strong security and adaptability, and can provide technical support for the network security strategy in the field of China Mobile Internet.