基于免疫的网络环境威胁变化感知与动态风险控制技术

Due to the lack of real-time quantitative perception method for the variation of the network environment threat, the current defense strategies for network security are mostly established based on historical experiences, without timely and accurate awareness to the network environment threat variation, thus having a more passivity and blindness, and a poor adaptability. To solve this problem, the key is that how to find a way to solve the problem of real-time quantitative perception for network environment threat variation, as well as the problem of dynamic security risk control. Inspired by the human immune mechanism that the antibody concentration synchronizes its variations with the invading virus, as well as the one that the human body temperature risk warning, this project carried out a series of exploration and innovation in the field of network environment threat perception and risk control, including an immune based network environment threat adaptive detection, the threat variation real-time quantitative perception, as well as a network environment threat variation based method for dynamic security risk control, etc, having ingeniously, where the classical difficult technical problem of the network environment threat variation real-time quantitative perception is solved, meanwhile, the problem that how to targeted defense for network security based on the threat variation of network environment, which feazing the network security experts in the world for many years, is thus overcome, therefore, providing direct technical support for establishing a new generation of active network security defense system.

由于缺乏实时定量的网络环境威胁变化感知手段，国内外现有网络安全系统防御策略的制定主要基于历史经验，对当前系统面临的威胁变化缺乏及时准确的了解，因此具有较大的盲目性和被动性，适应能力差。该问题的解决，其中的关键是网络环境威胁变化实时定量感知与动态风险控制问题。本项目创造性地将免疫系统“抗体浓度随入侵病毒同步动态演化”、以及“人体体温风险预警”等机制引入到网络安全的研究中，在网络环境威胁感知和风险控制方面进行了一系列探索和创新，包括基于免疫的网络环境威胁自适应发现、基于免疫的网络环境威胁变化实时定量感知、基于网络环境威胁变化的网络动态风险控制方法等，构思巧妙，探索解决传统方法无法实现“网络环境威胁变化实时定量感知”这一经典技术难题，并据此进一步攻克“如何针对当前网络环境威胁变化进行有针对性的防御”这一长期困扰业界的技术困难，为构建新一代积极主动的网络安全防御系统提供直接的技术支持。

由于缺乏实时定量的网络环境威胁变化感知手段，国内外现有网络安全系统防御策略的制定主要基于历史经验，对当前系统面临的威胁变化缺乏及时准确的了解，因此具有较大的盲目性和被动性，适应能力差。该问题的解决，其中的关键是网络环境威胁变化实时定量感知与动态风险控制问题。本项目创造性地将免疫系统“抗体浓度随入侵病毒同步动态演化”、以及“人体体温风险预警”等机制引入到网络安全的研究中，在网络环境威胁感知和风险控制方面进行了一系列探索和创新，包括基于免疫的网络环境威胁自适应发现、基于免疫的网络环境威胁变化实时定量感知、基于网络环境威胁变化的网络动态风险控制方法等，构思巧妙，探索解决传统方法无法实现“网络环境威胁变化实时定量感知”这一经典技术难题，并据此进一步攻克“如何针对当前网络环境威胁变化进行有针对性的防御”这一长期困扰业界的技术困难，为构建新一代积极主动的网络安全防御系统提供直接的技术支持。. 相关成果在IEEE Transactions on Industrial Informatics、Information Sciences、《中国科学》等国内外重要刊物发表论文73篇，其中被SCI收录16篇，EI收录8篇。申请国家发明专利共6项。研发了基于免疫的网络环境威胁感知与动态风险控制系统，并在国内推广应用。获得四川省科技进步一等奖1次。