Research On Cloud Platform Security Analysis Method Based On Stochastic Game Theory

With the popularity of cloud computing applications,cloud platform security has been widely concerned.In recent years,scholars at home and abroad have done a lot of research on the strategy of cloud security attack and defense,but few research have been done on security analysis of the cloud platform.In this paper,we analyze and evaluate the security risks on cloud platform.The concrete research content is as follows:(1)For the problem of attack and defense strategy selection on cloud platform,a stochastic game model based on cloud platform security is proposed in this paper.The model is an extension of MDP and matrix game model.It reflects the evolution process of dynamic attack and defense in multi person and multi state.First,the privileged state of the cloud platform attacker on the network device is used as a stochastic game model element.According to the dynamic change process of the attack and defense status on the cloud platform,the behavior strategy of the attacker and the defender is given,and the optimal attack and defense strategy is given by establishing the above model.Finally,the model is verified by the network example.The experiment shows that the model can predict the attack and defense behavior in the cloud platform reasonably,and it can provide certain basis for the security analysis of cloud platform.(2)For the problem of cloud platform security evaluation,a stochastic game net model of attack and defense based on cloud platform is proposed in this paper.The model is a combination model of stochastic Petri net and game theory.Through the method,a stochastic game net model of cloud platform is established and the Nash equilibrium strategy is calculated.Then the model is transformed into CTMC,and the attack behavior of the cloud platform is quantified by calculating the steady-state probability of the CTMC.The experimental results show that probability of a successful attack is related to the attack intensity and the attack revenue,but not to the attack rate;Attack response time is affected by attack intensity,attack revenue and attack rate;the reliability of cloud platform is related to attack intensity,attack revenue and attack rate.