CAJ | 학술논문

入侵防御系统是一种重要的安全防护措施,用于抵御针对信息系统的恶意攻击.但是不恰当的系统配置会对网络性能产生负面影响,如增大端到端延迟或数据包丢失率.大多数研究者关注的是提出新的入侵防御系统,分析其所使用的机器学习算法,而忽视对入侵防御系统本身性能的量化分析.文章将系统看作是一个拟生灭过程,通过建立二维的马尔可夫链模型,求得其稳定概率分布来计算一些重要的性能指标.实验证明利用文章所提出的通用分析方法可以有效评价系统性能,同时也间接证明了模型的正确性.
입침방어계통시일충중요적안전방호조시,용우저어침대신식계통적악의공격.단시불흡당적계통배치회대망락성능산생부면영향,여증대단도단연지혹수거포주실솔.대다수연구자관주적시제출신적입침방어계통,분석기소사용적궤기학습산법,이홀시대입침방어계통본신성능적양화분석.문장장계통간작시일개의생멸과정,통과건립이유적마이가부련모형,구득기은정개솔분포래계산일사중요적성능지표.실험증명이용문장소제출적통용분석방법가이유효평개계통성능,동시야간접증명료모형적정학성.
Intrusion prevention system (IPS) is a crucial defensive measure against malicious attacks to information system. However, the improper IPS conifguration can have a negative impact on network performances in terms of end-to-end delay or packets loss. Most researchers mainly focus on putting forward new IPS and analyzing the different methodologies, but ignoring the research of quantitative analysis on IPS. By analyzing the system as a quasi-birth-and –death process, this paper obtains the steady probabilities distribution to compute some important indices by establishing a two-dimensional Markov chain model. The experimental results prove that the general analytical method can effectively evaluate the performances of IPS, and also testify the correctness of the model indirectly.