先应秘密共享系统安全性的动态分析和评估

针对目前先应秘密共享系统基于经验的设计和系统管理问题,采用随机过程的建模技术,建立了系统的安全性与配置参数之间的定量关系,将先应秘密共享系统中的服务器组由初始安全态各失效态转移的渐进过程抽象为马尔可夫过程,因而可在服务器组构成多样性的前提下,获得对行凶应秘密共享系统安全性的理论估算,通过建立系统的状态转移强度图和转移方程,获得了系统的配置参数与其安全系统之间的定量关系,并给出了应用该方法的具体步骤,仿真实验验证了该方法在秘密共享系统安全性动态分析与定量评估方面具有有效性。

Dynamic analysis and evaluation of the security of a proactive secret sharing system

This paper proposes a method for evaluating and analyzing the security of a proactive secret sharing system. Due to the difficulty in quantitatively estimating the adversary ability, the stochastic modeling tchniques are used for depicting the relationships of the security to the threshold, the time period and the behavior of adversary. Thus, the process of state transition from the secure state to the compromised state can be modeled as the Markov chain. With the state-transition diagram, the security probability of the system is obtained. Simulation experiment shows that the method has good feasibility and effectiveness. As a result, the threshold and the time period can be selected based on the quantitative method rather than on the empirical knowledge.