Research On Conflict Detection And Resolution Method Of Cyber Defense Plan Based On STN

In response to today’s rampant cyber attacks,the cyber defense has gradually shifted from a single,unorganized defensive behavior to a concentrated,organized defensive behavior.The cyber defense plan allows cyber defense to be carried out orderly by constructing cyber defense tasks,rationally allocating cyber defense resources,and setting time constraints.However,in formulating a cyber defense plan,due to the limited knowledge and complexity of the plan,it is difficult for the plan maker to find the resource and time conflicts in the plan.These conflicts will cause errors in the actual implementation of the cyber defense plan and ultimately lead to the failure of cyber defense.Therefore,conflict handling of cyber defense plans is necessary to ensure the success of the cyber defense.Conflict handling mainly includes the handling of resource and time conflicts.The method is to detect and resolve conflicts.At present,there are more researches on single conflict handling but less research on handling both conflicts simultaneously.Since the cyber defense plan contains complex resource and time constraints,these two conflicts are likely to occur when making a plan.Therefore,it is essential to study how to deal with resource and time conflicts simultaneously.The existing resource conflict handling methods consider the constraint relationship between tasks to be relatively simple,and purely pursue conflict resolution,ignoring the optimization of cyber defense plan performance in the process of resolution.Existing methods for handling temporal conflicts have problems such as low conflict detection efficiency,unscientific benefit evaluation of resolution schemes,and excessively large conflict resolution granularity.To solve the deficiencies of the conflict as mentioned above handling methods,this paper studies the method based on STN(Simple Temporary Network)to detect and resolve the resource and time conflicts in the cyber defense plan.The work done is reflected in the following aspects:1.Analyzed the cyber defense architecture and cyber defense plan,then established a model based on STN to provide a model basis for subsequent conflict handling.2.In the process of detecting and resolving resource conflicts in the cyber defense plan,a variety of time constraints between tasks are considered,and the resource conflicts in the plan are detected based on time reasoning and the time axis.After detecting the resource conflict,a heuristic resource conflict resolution algorithm is proposed based on the idea of differential evolution to solve the resource conflict resolution scheme that minimizes the completion time of the cyber defense plan.3.A new benefit evaluation method is proposed to evaluate the benefits of the time conflict resolution program quantitatively.Based on this evaluation method,a batch detection and resolution algorithm for time conflicts is proposed to detect and construct a set of time conflicts in the cyber defense plan,and find the most effective time conflict resolution plan.4.Through a numerical example of a cyber defense plan,the whole process of modeling and conflict handling of the cyber defense plan proposed in this paper is introduced in detail,and the sequence relationship and reasons of conflict handling in the cyber defense plan are analyzed.