Analysis and Optimization of System Intrusion Tolerance Capacity Based on Markov

10.6633/IJNS.201711.19(6).20

Zhiyong Luo；Bo You；Peng Wang；Jie Su；Yi Liang

Capacity Analysis ； Intrusion Tolerance ； Markov ； SMP ； State Transition

International Journal of Network Security

19卷6期（2017 / 11 / 01）

1036 - 1043

英文

After the occurrence of network intrusion, the system is running in a state of the lower quality. Along with the system's tolerant capacity decline, it eventually stops pro- viding services or even shutdown. This paper developed a Markov intrusion tolerance model (SMP), aiming at difficultly evaluates and enhances the system's tolerant capacity issues. Based on formalized related security state of the model, the quantitative analysis of system's tolerant capacity is performed. Then calling the parameters solution algorithm to calculate the SMP model's average time of system fault (ATOSF) under each security state. After analyzing the variety track of ATOSF, found the system's tolerant key points. Maintenance of these key points, it can enhance the system's tolerant capacity, so as to increasing the availability of the system. The experiment results provide evidence that using the Markov to the system's tolerant capacity in the quantization process is feasible and effective.