An Approach for Description of Computer Network Defense Scheme and Its Simulation Verification

摘要: In order to solve the problem of which existing defense policy description languages can only describe some aspects defense, such as protection or detection, but cannot express relationship among actions and cope with large-scale network attack, we proposed an approach for computer scheme its simulation verification. A defense-oriented language (CNDSDL) was designed (i.e., access control, encryption communication, backup), detection intrusion vulnerability detection), analysis log auditing), response system rebooting, shutdown), recovery rebuild, patch making), sequence-and, sequence-or, concurrent-and, concurrent-or, xor). The Extend Backus-Naur Form (EBNF) CNDSDL provided. At last, provided implementation mechanism CNDSDL. task deadlock algorithm given scheme. completed in platform GTNetS. Three experiments verified capability effectiveness results show that described by be transformed detailed technique rules realize effect expression.