网络与信息安全学报 ›› 2022, Vol. 8 ›› Issue (2): 175-182.doi: 10.11959/j.issn.2096-109x.2021100

• 学术论文 • 上一篇    下一篇

基于FANP的云用户行为信任评估优化机制

张艺1, 田立勤1,2, 毋泽南2, 武文星1   

  1. 1 华北科技学院计算机学院，北京101601
    2 青海师范大学计算机学院，青海 西宁810000
  • 修回日期:2021-10-13 出版日期:2022-04-15 发布日期:2022-04-01
  • 作者简介:张艺（1995− ），女，山东威海，华北科技学院硕士生，主要研究方向为网络安全评价与用户行为认证
    田立勤（1970− ），男，陕西定边，博士，华北科技学院教授、博士生导师，主要研究方向为物联网远程信息监控、大数据有效性审核、网络安全评价与用户行为认证、网络性能评价与优化
    毋泽南（1991− ），男，河南焦作，青海师范大学博士，主要研究方向为信任安全、用户行为认证
    武文星（1996− ），男，山西吕梁人，华北科技学院硕士生，主要研究方向为算法优化
  • 基金资助:
    国家重点研发计划(2018YFC0808306);河北省重点研发计划(19270318D);河北省物联网监控工程技术研究中心(3142018055);青海省物联网重点实验室(2017-ZJ-Y21)

Trust evaluation optimization mechanism for cloud user behavior based on FANP

Yi ZHANG1, Liqin TIAN1,2, Zenan WU2, Wenxing WU1   

  1. 1 School of Computer, North China Institute of Science and Technology, Beijing 101601, China
    2 School of Computer, Qinghai Normal University, Xining 810000, China
  • Revised:2021-10-13 Online:2022-04-15 Published:2022-04-01
  • Supported by:
    TheNational key R＆D Program of China(2018YFC0808306);Key Research and Development Projects in Hebei Province(19270318D);Internet of things Monitoring Engineering Technology Research Center of Hebei Prov-ince(3142018055);Key Laboratory of Internet of Things of Qinghai Province(2017-ZJ-Y21)

在线阅读

33

pdf下载

480

摘要：

开放的云计算环境面临着安全挑战，传统的用户行为评估机制已经无法保障云端的安全性。为科学量化评估用户的行为信任，确保权重赋值科学合理，提高云平台下用户行为的安全可信度，设计出一种结合模糊网络分析法的信任评估优化机制。将模型中用户行为信任评估一个控制目标扩展为历史访问行为与当前访问环境两个控制目标模块，同时将历史访问行为模块划分为常规行为与灰色行为两个方面，将当前访问环境模块划分为信息完整性与访问安全性两个方面。在不同的控制目标下划分相对应的控制准则，从而构造不同控制目标下的网络分析模型，借助网络层次分析法软件计算各个目标模块下的极限超矩阵从而获取各个元素最终的稳定权重。选取开发平台下的真实用户行为数据来综合计算出不同模块下的信任度作为最终的行为评估结果。用户行为评估模块的扩展细化了评估粒度使评估结果的客观性更强，准确性更高。实验结果表明，与传统的用户行为信任评估模型相比，在相同恶意比率的云环境下，所提优化机制对恶意用户具有更好的识别效果，能够更早更快地识别出信任度低的云用户，从而提高了云端的安全性与合法性，同时为云环境下解决用户的安全可信问题以及进行有效的风险控制方面提供了新的研究思路。

关键词: 云计算, 用户行为, 模糊网络分析法, 信任度

Abstract:

The open cloud computing environment is facing security challenges and the traditional user behavior evaluation mechanism cannot guarantee the security of the cloud.In order to scientifically and quantitatively evaluate the user’s behavior trust, ensure the scientific and reasonable weight assignment, improve the security and credibility of user behavior under the cloud platform, a trust evaluation optimization mechanism combined with fuzzy analytic network process (FANP) was designed.In the proposal, user behavior trust evaluation based on one control target was extended to include two control target modules which were historical access behavior and current access environment.At the same time, the historical access behavior module was divided into two aspects: conventional behavior and gray behavior, and the current access environment module was divided into two directions: information integrity and access security.The corresponding control criteria was divided to construct the analytic network process (ANP) model under different control objectives.The limit hypermatrix under each target module was calculated to obtain the final stability weight of each element with the help of network analytic hierarchy process software.And the real user behavior data under the development platform was selected to comprehensively calculate the trust degree under different modules as the final behavior evaluation result.The expansion of the user behavior evaluation module refined the evaluation granularity, which makes the evaluation results more objective and accurate.In the cloud environment with the same malicious ratio, the optimization mechanism has better recognition effect, and it can identify cloud users with low trust efficiently and effectively, so as to improve the security and legitimacy of the cloud.At the same time, it also provids new research direction for solving the problem of user security and credibility, and effective risk control in the cloud environment.

Key words: cloud computing, user behavior, fuzzy analytic network process, degree of trust

中图分类号: 

No Suggested Reading articles found!