|
|
- 2017
云计算系统认知生存模型及量化分析
|
Abstract:
从云计算演变而来的云安全已成为网络安全领域新的研究热点，而云安全中的可生存性研究尤为重要。首先分析了云计算系统可生存性的研究现状；然后基于认知计算技术提出云计算系统的认知生存性定义，讨论了云计算系统的认知生存能力；最后使用半马尔科夫性能进程代数（SM-PEPA）对认知生存模型建模，并对其进行了量化评估。仿真试验以认知生存指数作为评估指标，对生存性威胁的构成、抵抗攻击的能力、策略库的知识丰富度以及生存性威胁检测率等参数的取值结合实例模拟对云计算系统认知生存性的影响，通过求解模型的首次通过时间概率密度函数，验证模型对认知生存能力评估的合理性和有效性。
| [1] | MA Z S, LIEXUN Y, RONALD P N, et al. A survivabilitycentered research agenda for cloud computing supported emergency response and management systems[C]//Proceedings of IEEE Aerospace Conference. Big Sky, MT, USA:IEEE Computer Society Press, 2014:1-17. |
| [2] | CHEN G, JIN H, ZOU D Q, et al. A lightweight software fault-tolerance system in the cloud environment[J]. Concurrency Computation, 2015, 27(12):2982-2998. |
| [3] | 张勇实, 张乐君, 张健沛, 等. 基于QoS关联分析的分布式系统可生存性评估[J]. 电子科技大学学报, 2013, 42(1):109-114. ZHANG Yong-shi, ZHANG Le-jun, ZHANG Jian-pei. Distributed system survivability evaluation based on the correlations analysis of QoS[J]. Journal of University of Electronic Science and Technology of China, 2013, 42(1):109-114. |
| [4] | 何怀文, 傅瑜. 批量到达下的IaaS云计算中心服务性能评价[J]. 电子科技大学学报, 2015, 44(3):445-450. HE Huai-wen, FU Yu. Service performance evaluation of IaaS cloud computing center under batch arrivals[J]. Journal of University of Electronic Science and Technology of China, 2015, 44(3):445-450. |
| [5] | 王慧强, 徐俊波, 冯光升, 等. 认知网络体系结构研究新进展[J]. 计算机科学, 2011, 38(8):9-16, 24. WANG Hui-qiang, XU Jun-bo, FENG Guang-sheng, et al. Review of architectures of cognitive network[J]. Computer Science, 2011, 38(8):9-16, 24. |
| [6] | WESTMARK V R. A definition for information system survivability[C]//Proceedings of the 37th Hawaii Internal Conference on System Sciences. Washington:IEEE Computer Society Press, 2004:2086-2096. |
| [7] | ELLISON R, LINGER R, LONGSTAFF T. Survivability network system analysis:a case study[J]. IEEE Software, 1999(4):70-77. |
| [8] | 吴吉义, 沈千里, 章剑林. 云计算:从云安全到可信云[J]. 计算机研究与发展, 2010, 48(z1):229-233. WU Ji-yi, SHEN Qian-li, ZHANG Jian-lin. Cloud computing:Cloud security to trusted cloud[J]. Journal of Computer Research and Development, 2010, 48(z1):229-233. |
| [9] | XU J L, TANG J, KWIAT K, et al. Enhancing survivability in virtualized data centers:a service-aware approach[J]. IEEE Journal on Selected Areas in Communications, 2013, 31(12):2610-2619. |
| [10] | LIAO D, SUN G, ANAND V, et al. Survivable provisioning for multicast service oriented virtual network requests in cloud-based data centers[J]. Optical Switching and Networking, 2014, 44(3):260-273. |
| [11] | MEDHIOUB M, HAMDI M, KIM T H. Requirements capture and comparative analysis of cloud security techniques[J]. International Journal of Grid and Distributed Computing, 2015, 8(2):285-308. |
| [12] | 赵淦森, 王维栋, 孙伟. 云计算平台生存性研究[J]. 电信科学, 2011, 27(9):52-59. ZHAO Gan-sen, WANG Wei-dong, SUN Wei. Research of cloud survivability[J]. Telecommunications Science, 2011, 27(9):52-59. |
| [13] | HILLSTON J. Tuning systems:from composition to performance[J]. Computer Journal, 2005, 48(4):385-400. |
| [14] | 严博, 吴晓平, 廖巍, 等. 基于随机进程代数的P2P网络蠕虫对抗传播特性分析[J]. 电子学报, 2012, 40(2):293-299. YAN Bo, WU Xiao-ping, LIAO Wei, et al. Propagation characteristics analysis of worm-anti-worm in P2P network based on stochastic process algebra[J]. Acta Electronica Sinica, 2012, 40(2):293-299. |
| [15] | 郭辉. 进程代数及其在性能评价中的应用综述[J]. 微计算机应用, 2007, 28(9):901-905. GUO Hui. Process algebra and application of it in performance evaluation[J]. Micorocomputer Applications, 2007, 28(9):901-905. |
| [16] | BRADLEY J T. Semi-Markov PEPA:Compositional modelling and analysis with generally distributed actions[D]. Bradford:University of Bradford, 2004. |
| [17] | MELL P, GRAMCE T. The NIST definition of cloud computing[J]. Communications of the Acm, 2011, 53(6):50-50. |
| [18] | 董超, 毕晓君. 认知计算的发展综述[J]. 电子世界, 2014(15):200-201. DONG Cao, BI Xiao-jun. Survey on cognitive computing[J]. Electronics World, 2014(15):200-201. |
| [19] | 林俊宇, 王慧强, 马春光, 等. 一种基于DAG动态重构的认知网络服务迁移方法[J]. 软件学报, 2014(10):2373-2384. LIN Jun-yu, WANG Hui-qiang, MA Chun-guang, et al. Service migration method for cognitive network based on DAG dynamic reconstruction[J]. Journal of Software, 2014(10):200-201. |
| [20] | BRADLEY J T. Semi-Markov PEPA:Modelling with generally distributed actions[J]. International Journal of Simulation, 2005, 6(3):43-51. |
| [21] | 王健, 赵国生. 基于SM-PEPA可生存系统认知模型及量化分析[J]. 华中科技大学学报(自然科学版), 2015, 43(5):99-103. WANG Jian, ZHAO Guo-sheng. Cognitive model and quantitative analysis for survivable system based on SM-PEPA[J]. Journal of Huazhong University of Science and Technology (Nature Science Edition), 2015, 43(5):99-103. |
| [22] | Laboratory for Foundations of Computer Science, the University of Edinburgh. Version v25 of the PEPA eclipse plugin[EB/OL]. (2011-6-8)[2015-02-10]. http://www.dcs.ed.ac.uk/pepa/downloads. |
| [23] | 王慧强, 吕宏武, 赵倩, 等. 一种关键任务系统自律可信性模型与量化分析[J]. 软件学报, 2010, 21(2):344-358. WANG Hui-qiang, Lü Hong-wu, ZHAO Qian, et al. Model and quantification of autonomic dependability of mission-critical systems[J]. Journal of Software, 2010, 21(2):344-358. |
| [24] | BRADLEY J T, DINGLE N J, HARRISON P G, et al. Distributed computation of transient state distributions and passage time quantiles in large semi-Markov models[J]. Future Generation Computer Systems, 2006, 22(7):828-837. |
