Dynamic security-empowering architecture for space-ground integration information network

Lingcui ZHANG; Yaobing XU; Fenghua LI; Liang FANG; Yunchuan GUO; Zifu LI

doi:10.11959/j.issn.1000-436x.2021180

您当前的位置：

首页 >

文章列表页 >

Dynamic security-empowering architecture for space-ground integration information network

Papers | 更新时间：2024-06-05

- Dynamic security-empowering architecture for space-ground integration information network
- Journal on Communications Vol. 42, Issue 9, Pages: 87-95(2021)
- 作者机构：
  
  1. 中国科学院信息工程研究所，北京 100195
  2. 中国科学院大学网络空间安全学院，北京 100049
- 作者简介：
- 基金信息：
  
  The National Key Research and Development Program of China(2016YFB0801001);The National Natural Science Foundation of China(U1836203);The Key Research and Development Program of Shandong Province(2019JZZY020127)
- DOI：10.11959/j.issn.1000-436x.2021180
  CLC： TN929
- Online First：2021-09，
  
  Published：25 September 2021
- 稿件说明：
移动端阅览
Lingcui ZHANG, Yaobing XU, Fenghua LI, et al. Dynamic security-empowering architecture for space-ground integration information network[J]. Journal on Communications, 2021, 42(9): 87-95.
DOI：

Lingcui ZHANG, Yaobing XU, Fenghua LI, et al. Dynamic security-empowering architecture for space-ground integration information network[J]. Journal on Communications, 2021, 42(9): 87-95. DOI： 10.11959/j.issn.1000-436x.2021180.

摘要

天地一体化信息网络的安全需求动态变化、威胁动态变化、防护技术动态变化等特征导致已有的安全防护技术不再适用于天地网络。针对上述需求，提出了融合安全服务能力编排、安全态势分析、安全威胁处置指挥等于一体的天地一体化信息网络安全动态赋能架构，并形式化定义了该架构；然后提出了一种对威胁处置效果的双重判定方法，并基于信念熵证明了双重判定的可信性。

Abstract

To satisfy the above requirements that due to the dynamic characteristics (e.g.

the dynamic variability of threats

and the dynamic changes of protection technology) of space-ground integration information network (SGIIN)

the existing security technologies were no longer applicable.Firstly

a security-empowering architecture for SGIIN was designed and formalized

which integrated capability orchestration unit of security service

analysis unit of security situation and the response unit of security threat measure.Then

a double judgment method for the effectiveness of threat measure was proposed.Finally the method is theoretically proved to be credible by using belief mini-entropy.

关键词

Keywords

references

李凤华 , 殷丽华 , 吴巍 , 等 . 天地一体化信息网络安全保障技术研究进展及发展趋势 [J ] . 通信学报 , 2016 , 37 ( 11 ): 156 - 168 .

LI F H , YIN L H , WU W , et al . Research status and development trends of security assurance for space-ground integration information network [J ] . Journal on Communications , 2016 , 37 ( 11 ): 156 - 168 .

LIU J J , SHI Y P , FADLULLAH Z M , et al . Space-air-ground integrated network:a survey [J ] . IEEE Communications Surveys ＆ Tutorials , 2018 , 20 ( 4 ): 2714 - 2741 .

DAS S , LIU Y , ZHANG W , et al . Semantics-based online malware detection:towards efficient real-time protection against malware [J ] . IEEE Transactions on Information Forensics and Security , 2016 , 11 ( 2 ): 289 - 302 .

AMBUSAIDI M A , HE X J , NANDA P , et al . Building an intrusion detection system using a filter-based feature selection algorithm [J ] . IEEE Transactions on Computers , 2016 , 65 ( 10 ): 2986 - 2998 .

SHAMELI-SENDI A , LOUAFI H , HE W B , et al . Dynamic optimal countermeasure selection for intrusion response system [J ] . IEEE Transactions on Dependable and Secure Computing , 2018 , 15 ( 5 ): 755 - 770 .

SCHMITZ C , PAPE S . LiSRA:lightweight security risk assessment for decision support in information security [J ] . Computers ＆ Security , 2020 ,90:101656.

CINQUE M , DELLA C R , PECCHIA A . Contextual filtering and prioritization of computer application logs for security situational awareness [J ] . Future Generation Computer Systems , 2020 , 111 : 668 - 680 .

KHRAISAT A , GONDAL I , VAMPLEW P , et al . Survey of intrusion detection systems:techniques,datasets and challenges [J ] . Cybersecurity , 2019 , 2 ( 1 ): 20 .

BRABRA H , MTIBAA A , GAALOUL W , et al . Toward higher-level abstractions based on state machine for cloud resources elasticity [J ] . Information Systems , 2020 ,90:101450.

YAO J Y , FAN X N , CAO N . Survey of network security situational awareness [M ] . Berlin : Springer , 2019 .

ZHENG G , PENG Y . GlobalFlow:a cross-region orchestration service for serverless computing services [C ] // Proceedings of 2019 IEEE 12th International Conference on Cloud Computing . Piscataway:IEEE Press , 2019 : 508 - 510 .

SHIN S , YEGNESWARAN V , PORRAS P , et al . AVANT-GUARD:scalable and vigilant switch flow management in software-defined networks [C ] // Proceedings of the 2013 ACM SIGSAC Conference on Computer ＆ Communications Security . New York:ACM Press , 2013 : 413 - 424 .

SHIN S , PORRAS P , YEGNESWARAN V , et al . FRESCO:modular composable security services for software-defined networks [C ] // Proceedings of the Symposium on Network and Distributed System Security . Piscataway:IEEE Press , 2013 : 1 - 16 .

XU S P , ZHANG Y H , ZHOU Y , et al . Design and application of a network security model [C ] // Proceedings of the 2nd International Symposium on Computer,Communication,Control and Automation . Paris:Atlantis Press , 2013 : 2773 - 2776 .

DEMIRCI M , AMMAR M . Design and analysis of techniques for mapping virtual networks to software-defined network substrates [J ] . Computer Communications , 2014 , 45 : 1 - 10 .

Views

1546

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Proxy re-encryption based multi-factor access control scheme in cloud

Research status and development trends of security assurance for space-ground integration information network

Related Author

Mang SU

Guozhen SHI

Anmin FU

Yan YU

Wei JIN

Feng-hua LI

Li-hua YIN

Wei WU

Related Institution

School of Computer Science and Engineering, Nanjing University of Science and Technology

School of Information Security,Beijing Electronic Science and Technology Institute

Institute of Information Engineering,CAS

State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences

CETC 54

AI问答

⁰