推荐重要节点部署防御策略的优化模型?
Recommendation of imp ortant no des in deployment optimization mo del of defense strategy
-
摘要: 当前网络安全防御策略集中部署于高连接度节点主要有2个方面的不足:一是高连接度节点在很多场合中并不是网络通信的骨干节点;二是该类节点对信息的转发和传播并非总是最有效的。针对以上传统部署策略的不足,改进了恶意病毒程序传播的离散扩散模型并采用中间路径跳数来衡量网络节点的重要程度,提出了基于介数中心控制力和接近中心控制力模型的重要节点优先推荐部署技术。实验结果显示具有高介数中心控制力和低接近中心控制力的节点相对于传统的高连接度节点无论在无标度网络还是小世界网络均能够对恶意病毒程序的疫情扩散和早期传播速度起到更加有效的抑制作用,同时验证了网络分簇聚类行为产生的簇团特性也将对恶意程序的传播起到一定的负面影响。Abstract: Current network security defense strategy focuses on deploying to high degree nodes where there are mainly two aspects of the problem: One is that the high-degree nodes are not the backbone nodes for the network communication in many occasions; another is that these nodes are not always the most effective ones for forwarding and propagation information. With the disadvantage of current network defense strategy deployment, this paper tends to improve the traditional diffusion model of malicious program propagation and measure the importance of network nodes by using intermediate hops, then the important node for recommended deployment technology based on betweenness center control and closeness center control model is put forward. Experimental results show that the nodes with high betweenness centrality and low closeness centrality as compared with the high degree nodes can more effectively quarantine the spreading of the worms whether in scale-free network or in small world network. Meanwhile, the clustering behavior of a network will also play a certain negative impact on the spread of malicious programs.
-
-
计量
- 文章访问数: 256
- HTML全文浏览数: 63
- PDF下载数: 0
- 施引文献: 0