A Graph Analysis Approach to Detect Attacks in Multi-agent Systems at Runtime
A Graph Analysis Approach to Detect Attacks in Multi-agent Systems at Runtime
复制标题
一种在运行时检测多代理系统攻击的图分析方法
DOI：
10.1109/saso.2014.20
复制
发表时间：
2014
期刊：
影响因子：
--
通讯作者：
C. Müller
中科院分区：
文献类型：
--
作者：
Jan Kantert;H. Scharf;Sarah Edenhofer;Sven Tomforde;J. Hähner;C. Müller
由各种异构和自治实体组成的完全自组织和开放的系统可能会受到恶意元素或攻击的影响。科普这一挑战的一种方法是引入信任。因此，信任关系基于各个实体之间的评级，并代表全系统的信息。可信桌面计算网格就是一个例子，其中这种信任机制已被成功应用。在本文中，我们研究了在自组织系统中添加系统级观察员的可能性，以指导整体行为并干预主要是恶意行为导致的干扰情况。因此，我们详细描述了如何观察的一部分，这个观察员可以实现什么样的指标可以应用于检测不希望的系统行为。使用可信桌面网格进行评估，并证明了通过考虑可信实体集群来快速可靠地检测恶意行为的可能性。
Fully self-organised and open systems consisting of a variety of heterogeneous and autonomous entities can suffer due to malicious elements or attacks. One approach to cope with this challenge is to introduce trust. Thereby, trust relationships are based on ratings among individual entities and represent system-wide information. A Trusted Desktop Computing Grid is one example, where such a trust mechanism has been applied successfully. In this paper, we investigate the possibility to add an system-level Observer to the self-organised system in order to guide the overall behaviour and to intervene in disturbed situations that are mostly a result of malicious behaviour. Therefore, we describe in detail how the observation part of this Observer can be realised and what kind of metrics can be applied to detect undesired system behaviour. Evaluations are done using the Trusted Desktop Grid and demonstrate the possibility to detect malicious behaviour quickly and reliably by considering clusters of trusted entities.