Information security: Designing a stochastic‐network for throughput and reliability

Todas information and communication network requires a design that is secure to tampering. Traditional performance measures of reliability and throughput must be supplemented with measures of security. Recognition of an adversary who can inflict damage leads toward a game‐theoretic model. Through such a formulation, guidelines for network designs and improvements are derived. We opt for a design that is most robust to withstand both natural degradation and adversarial attacks. Extensive computational experience with such a model suggests that a Nash‐equilibrium design exists that can withstand the worst possible damage. Most important, the equilibrium is value‐free in that it is stable irrespective of the unit costs associated with reliability vs. capacity improvement and how one wishes to trade between throughput and reliability. This finding helps to pinpoint the most critical components in network design. From a policy standpoint, the model also allows the monetary value of information‐security to be imputed. © 2009 Wiley Periodicals, Inc. Naval Research Logistics, 2009     

爆炸逻辑间隙零门实验研究

为了可靠实现爆炸逻辑间隙零门的原理功能,提出并验证了一种基于精细RDX和含能胶合剂的传爆药方案.通过实验探索了基于该传爆药的爆炸零门适用的间隙宽度范围,并设计了一种小尺寸爆炸逻辑间隙零门,为爆炸逻辑网络设计提供参考.     

Interdiction models for delaying adversarial attacks against critical information technology infrastructure

Information technology (IT) infrastructure relies on a globalized supply chain that is vulnerable to numerous risks from adversarial attacks. It is important to protect IT infrastructure from these dynamic, persistent risks by delaying adversarial exploits. In this paper, we propose max‐min interdiction models for critical infrastructure protection that prioritizes cost‐effective security mitigations to maximally delay adversarial attacks. We consider attacks originating from multiple adversaries, each of which aims to find a “critical path” through the attack surface to complete the corresponding attack as soon as possible. Decision‐makers can deploy mitigations to delay attack exploits, however, mitigation effectiveness is sometimes uncertain. We propose a stochastic model variant to address this uncertainty by incorporating random delay times. The proposed models can be reformulated as a nested max‐max problem using dualization. We propose a Lagrangian heuristic approach that decomposes the max‐max problem into a number of smaller subproblems, and updates upper and lower bounds to the original problem via subgradient optimization. We evaluate the perfect information solution value as an alternative method for updating the upper bound. Computational results demonstrate that the Lagrangian heuristic identifies near‐optimal solutions efficiently, which outperforms a general purpose mixed‐integer programming solver on medium and large instances.     

基于大数据分析的网络管理智能化

军事通信网综合管理系统中,各专业网络运行情况的主要数据都可汇总到综合网管数据库中。这些网管数据中隐含了网络运行的几乎全部信息,但即使是最有经验的网络管理专家面对这些繁杂的数据也只能望洋兴叹。面对大数据的智能分析技术则有可能实现网络运行态势的高度可视化,充分理解和详细把握全网运行状态,像知识、经验、联想丰富的专家一样不知疲倦地对网络运行状况进行全面细致地分析,从海量的网管数据中发现网络故障的蛛丝马迹,发现隐含的问题,预知网络变化。论文介绍了利用大数据分析技术实现网络管理智能化的现实目标,基于性能的网络异常预测预报、基于性能和事件的故障分析诊断、网络运行知识的挖掘利用等方面的功能和技术途径。     

弹道导弹威胁估计模型构建

简要分析了弹道导弹飞行3个阶段的不同特点及各阶段导弹预警探测手段的侧重点,结合威胁估计的特征构建了弹道导弹威胁估计模型结构框架,运用多阶段贝叶斯网络理论,构造了主动段、自由段和再入段威胁估计模型,并明确了三阶段间的转换时机。采用动态贝叶斯方法对弹道导弹作战全过程进行威胁估计仿真推理,仿真结果能够反映导弹在飞行过程中威胁程度的变化特点,为反导指挥员作出辅助决策提供智力支持。     

武器装备体系能力矩阵评估方法

针对武器装备体系能力难以客观、定量评估的问题,引入复杂网络理论,提出了基于矩阵运算的武器装备体系能力评估方法。分析了武器装备体系能力的概念,建立了武器装备体系的复杂层次网络模型,描述了装备网络的组成、运行过程,定义了装备网络的矩阵描述方法和矩阵运算规则,提出了装备网络作战能力描述参数,给出了装备网络能力的矩阵计算方法,进行了影响因素分析,最后通过实例验证了方法可行性、有效性和灵活性。     

基于VR与PNN相结合的机电液控制系统故障诊断方法

针对大型复杂机电液控制系统故障诊断中存在的数学模型获取困难、历史故障数据匮乏问题,提出了一种将虚拟样机与概率神经网络相结合的故障诊断混合方法。建立系统的虚拟样机,并对其可信性进行校核与验证。在此基础上进行大量随机性故障植入与仿真实验,获取故障仿真数据。经过特征提取与概率神经网络模式识别训练,形成用于诊断的知识库,从而实现故障诊断。以操舵系统作为研究案例,得到了较高的故障检测和隔离精度与较低的虚警及漏警率,验证了该方法的可行性,为大型复杂机电液控制系统故障诊断提供新的思路。     

防空群对多批次小间隔目标射击效能评估

基于排队网络理论的适用性分析以及基本假设与适当简化,将防空群对多批次、小间隔目标射击问题转化、抽象为排队网络对顾客流的服务问题,建立了防空群对多批次、小间隔目标射击效能评估的"分布式协同排队网络"模型。在特定作战实例和假设条件下,应用所建模型,计算得出了典型火力配属方案下防空群对多批次、小间隔目标射击效能的量化结果,实现了防空群对多批次、小间隔目标的射击效能的定量化评估,验证了所建模型的可行性与有效性。     

基于优先权的分布式网络设备智能轮询策略研究

针对大型网络其地域分布广,监测对象较多,监测周期过长,实时性较差且管理流量负载较大等问题,提出一种分布式网络设备智能轮询策略。在域内,针对轮询周期调整问题,通过构造体现管理者意志的评判矩阵和求解反映数据特征的DFT(离散傅立叶变换)确定轮询优先级和轮询周期取值范围,提出了基于变化率的轮询周期调整算法;在域间,通过触发和查询实现对特殊事件的采集。最后进行了仿真,表明该策略能够在减轻网络负载的同时,准确刻画网络的状态。     

基于复杂网络理论的岸防作战体系骨干网络研究

随着信息技术在战争中的大量应用,现代战争越来越呈现出网络化和体系对抗性,研究其拓扑特性已十分必要。基于复杂网络理论,首先建立了岸防作战体系网络模型,然后提出一种基于贪心思想的骨干网挖掘算法,最后对模型的骨干网络进行了研究。结果表明该方法能够快速、准确地挖掘出岸防作战体系的网络骨干,并能为军事对抗体系的复杂网络应用研究提供借鉴和参考。