Research And Implementation Of Evaluation Model For Harms Of Trojan Based On Network Simulation Platform

Increasingly serious network security situation pushes us to urgently require a deeper understanding of and quicker response to network attacks.As the platform on which network attacks are studied,network simulation platform attracts attention of all nations.In order to study network attacks more fully in both qualitative and quantitative ways,the network attack effect evaluation system is regarded as the key of a network simulation platform.Trojan attack is one of major network attacks.A customized evaluation system for harms of Trojan is an indispensable part of a modern network simulation platform.Firstly,by means of analysis of Trojan viruses' behavior characteristics,an index system was designed,based on which an offline evaluation model was proposed.Secondly,index systems and an online evaluation model for harms of Trojan were proposed by modeling Trojan attack processes.The main works of this paper includes the following aspects:1)An offline evaluation model based on index system was proposed.By starting with classification of Trojan viruses and analysis of Trojan attack processes,we fully analyzed the behavior characteristics of various Trojan viruses.By FAHP method,an index system was built.The transmissibility,hiddenness,offensive and defensive of Trojan viruses compose the sub-criteria of the index system.On one hand,in order to effectively integrate subjective and objective weights in a many-to-one way,we proposed a weight integrating method based on bias of weight components,which promotes applicability of the quantitative evaluation method.On the other hand,we brought in the fuzzy comprehensive assessment method to accomplish qualitative evaluation.By comparison,the offline evaluation model was validated from the aspects of rationality and accuracy.2)An online evaluation model based on index system was proposed.According to the analysis of the power outrage in Ukraine,we used attack process graph as an to depict the attack process in simulation experiment.By FAHP method,index systems for all strongholds were built.On basis of the attack process graph,the evaluation results of all strongholds were effectively integrated into one,which is exactly the online evaluation result.By simulation experiment,the online evaluation model was validated from the aspects of rationality and monotonicity.3)A prototype system is implemented based on above researches,which contains data preprocessing module,evaluation and visualization module and so on.