一种基于Petri net的分布式入侵容忍系统模型研究

Journal of Systems Engineering and Electronics ›› 2009, Vol. 31 ›› Issue (1): 208-212.

一种基于Petri net的分布式入侵容忍系统模型研究

秦华旺, 戴跃伟, 王执铨

南京理工大学自动化学院, 江苏, 南京, 210094

收稿日期:2007-07-06 修回日期:2007-08-04 出版日期:2009-01-20 发布日期:2010-01-03
作者简介:秦华旺(1978- ),男,博士研究生,讲师,主要研究方向为人侵容忍.E-mail:qin_h_W@163.com
基金资助:
国家自然科学基金资助课题(60374066)

Model of distributed intrusion tolerant system based on Petri net

QIN Hua-wang, DAI Yue-wei, WANG Zhi-quan

School of Automatization, Nanjing Univ. of Science & Technology, Nanjing 210094, China

Received:2007-07-06 Revised:2007-08-04 Online:2009-01-20 Published:2010-01-03

摘要/Abstract

摘要： 入侵容忍是新兴的第三代网络安全技术。针对现有入侵容忍系统模型的不足,以Petri net为建模工具,提出了一种分布式入侵容忍系统的模型,给出了该模型的具体解释,并通过实例详细分析了模型的多个性能。分析结果表明,该模型能够扩展对现有入侵容忍系统的描述范围,同时也细化了对入侵容忍系统各个属性的描述。

Abstract: Intrusion tolerance is the rising third generation technology of network security.For the shortcomings of existing models of intrusion tolerant systems,a model of distributed intrusion tolerant systems is proposed through the tool of Petri net.The concrete interpretation of the model is given,and the performances of the model are analyzed in detail on the basis of examples.The results of analysis show that this model extends the description range of the existing intrusion tolerant system and can describe many of the properties of intrusion tolerant systems more particularly.

中图分类号:

TP393

秦华旺, 戴跃伟, 王执铨. 一种基于Petri net的分布式入侵容忍系统模型研究[J]. Journal of Systems Engineering and Electronics, 2009, 31(1): 208-212.

QIN Hua-wang, DAI Yue-wei, WANG Zhi-quan. Model of distributed intrusion tolerant system based on Petri net[J]. Journal of Systems Engineering and Electronics, 2009, 31(1): 208-212.

参考文献

[1] Goseva-Popstojanova K,Wang F,Wang R.Characterizing intrusion tolerant systems using a state transition model[J].DARPA Information Survivability Conference and Exposition,2001,2,211-221.
[2] 彭文灵,王丽娜,张焕国.基于有限自动机的网络入侵容忍系统研究[J].小型微型计算机系统,2005,26(8):1296-1300.
[3] 崔竞松,王丽娜,张焕国,等.一种并行容侵系统研究模型--RC模型[J].计算机学报,2004,27(4):500-506.
[4] 荆继武,冯登国.一种入侵容忍的CA方案[J].软件学报,2002,13(8):1417-1422.
[5] 季称利,杨晓元,胡予濮,等.二方共享与t_n门限方案相结合的容侵CA方案[j].计算机工程,2005,31(21):138-142.
[6] 俞艳苹,郭渊博,马建峰.基于自适应大数表决机制的容忍入侵模型[J].系统工程与电子技术,2005,27(6):1098-1101.(Yu Yanping,Guo Yuanbo,Ma jianfeng.Intrusion tolerant architecture with adaptiue majority voting mechanism[J].Systems Engineering and Electronics,2005,27(6):1098-1101.)
[7] 邹立新,丁建立.基于拜占庭协议的入侵容忍系统模型设计[J].计算机工程,2005,31(增刊):88-90.
[8] Castro M,Liskov B.Proactive recovery in a Byzantine-fault-tolerant system[J].In 4th Syrup.On Operating systems design and impl.,2002:273-288.
[9] Huang Y,Arsenauh D,Sood A.Incorruptible system selfcleansing for intrusion tolerance[C]//Performance,Computing,and Communications Conference,25th IEEE International,2006:4.
[10] Neves N F,Verissimo P.Complete specification of APIs and protocols for the MAFTIA middleware[C]//Project MAFTIA IST-1999-11583,2002.
[11] 彭文灵,王丽娜,张焕国,等.基于角色访问控制的入侵容忍机制研究[J].电子学报,2005,33(1):91-95.
[12] Liu P.Architecture for intrusion tolerant database systems[C]//Computer Security Applications Conference,2002:311-320.
[13] Stroud R,Welch I,Wame J.A qualitative analysis of the intrusion-tolerance capabilities of the MAFTIA architecture[C]//Dependable Systems and Networks,2004 International Conference,2004:453-461.
[14] 殷丽华,方滨兴.入侵容忍系统的安全属性分析[J].计算机学报,2006,29(8):1505-1512.
[15] Kreidl O P,Frazier T M.Feedback control applied to survivability:a host-based automatic defense system[J].IEEE Transactions on Reliability,2004:148-166.
[16] Wu T,Malkin M,Boneh D.Building intrusion tolerant applications[C]//DARPA Information Survivability Conference and Exposition,2000:74-87.
[17] 郭渊博,马建峰.入侵容忍的国内外研究现状及所存在的问题分析[J].信息安全与保密通信,2005.
[18] 袁崇义.Petri网原理与应用[M].北京:电子工业出版社,2005.