面向太空网络战威胁的态势感知本体建模

doi:10.12305/j.issn.1001-506X.2023.03.15

系统工程与电子技术 ›› 2023, Vol. 45 ›› Issue (3): 745-754.doi: 10.12305/j.issn.1001-506X.2023.03.15

面向太空网络战威胁的态势感知本体建模

刘斌¹^,²^,*, 蚁佳才³, 姚莉², 王炎娟⁴, 丁兆云², 朱先强²

1. 国防科技大学系统工程学院, 湖南长沙 410073
2. 国防科技大学信息系统工程重点实验室，湖南长沙 410073
3. 国防科技大学计算机学院, 湖南长沙 410073
4. 北京航天飞行控制中心, 北京 100094

收稿日期:2021-01-25 出版日期:2023-02-25 发布日期:2023-03-09
通讯作者: 刘斌
作者简介:刘斌(1989—), 男, 讲师, 博士, 主要研究方向为大规模本体推理、知识工程、多域态势认知
蚁佳才(1997—), 男, 硕士研究生, 主要研究方向为网络安全、知识抽取、大规模数据并行处理
姚莉(1965—), 女, 教授, 博士, 主要研究方向为知识工程、智能决策技术
王炎娟(1984—), 女, 工程师, 博士, 主要研究方向为航天测控、智能任务规划
丁兆云(1982—), 男, 副教授, 博士, 主要研究方向为数据挖掘、多源情报处理
朱先强(1983—), 男, 副研究员, 博士, 主要研究方向为指挥控制技术、网络目标体系分析
基金资助:
科研项目(GK20191A010279);科研项目(GK20191A010296)

Situational awareness ontology modeling for threat from space cyber operations

Bin LIU¹^,²^,*, Jiacai YI³, Li YAO², Yanjuan WANG⁴, Zhaoyun DING², Xianqiang ZHU²

1. College of System Engineering, National University of Defense Technology, Changsha 410073, China
2. Science and Technology on Information Systems and Engineering Laboratory, National University of Defense Technology, Changsha 410073, China
3. School of Computer Science and Technology, National University of Defense Technology, Changsha 410073, China
4. Beijing Aerospace Control Center, Beijing 100094, China

Received:2021-01-25 Online:2023-02-25 Published:2023-03-09
Contact: Bin LIU

摘要/Abstract

摘要：

实现对卫星网络空间威胁的态势感知, 是太空网络安全防御的前提。针对卫星网络空间安全防御, 提出了卫星网络空间威胁态势感知需要回答的一系列问题, 构建了卫星网络空间态势感知本体(ontology of cyberspace situational awareness for satellite, OntoCSA4Sat), 用于对卫星网络空间多源情报进行自动关联和推理。通过对一个案例进行表示和推理实验, 验证了OntoCSA4Sat的一致性和用于推理解决卫星网络空间威胁态势感知问题的可行性, 表明OntoCSA4Sat可为卫星网络空间威胁的态势感知提供分析框架, 为太空网络安全防御辅助决策提供支撑。

关键词: 太空安全, 网络安全, 卫星, 态势感知, 本体, 知识库, 推理

Abstract:

Realizing situational awareness of satellite cyberspace threats is the premise of space network security defense. Aiming at the security defense of satellite cyberspace, a series of questions that need to be answered for satellite cyberspace threat situational awareness are put forward, and the ontology of cyber situational awareness for satellite (OntoCSA4Sat) is constructed, which is used for automatic correlation and reasoning of multi-source intelligence of satellite cyberspace. Through a case of representation and reasoning experiment, the consistency of OntoCSA4Sat and the feasibility of reasoning to solve the satellite cyberspace threat situation awareness problem are verified. The case shows that OntoCSA4Sat can provide an analysis framework for satellite cyberspace threat situation awareness and support for space network security defense auxiliary decision-making.

Key words: space security, cyber security, satellite, situational awareness, ontology, knowledge base, reasoning

中图分类号:

刘斌, 蚁佳才, 姚莉, 王炎娟, 丁兆云, 朱先强. 面向太空网络战威胁的态势感知本体建模[J]. 系统工程与电子技术, 2023, 45(3): 745-754.

Bin LIU, Jiacai YI, Li YAO, Yanjuan WANG, Zhaoyun DING, Xianqiang ZHU. Situational awareness ontology modeling for threat from space cyber operations[J]. Systems Engineering and Electronics, 2023, 45(3): 745-754.

图/表 10

图1

图2

图3

图4

图5

图6

图7

表1

图8

表2

参考文献 33

1	HackASat. Space security challenge 2020: HACK-A-SAT[EB/OL]. [2021-01-20]. https://www.hackasat.com/.
2	YANG S L, CAO S Z, WEI J Y, et al. Space-based computing platform based on SoC FPGA[C]//Proc. of the IEEE World Congress on Services, 2019: 172-177.
3	陈建光, 王聪, 梁晓莉. 国外软件定义卫星技术进展[J]. 卫星与网络, 2018, (4): 50- 53.
	CHEN J G , WANG C , LIANG X L . Overseas progress on technology of software-defined satellites[J]. Satellites and Networks, 2018, (4): 50- 53.
4	PAVUR J, MARTINOVIC I. The cyber-ASAT: on the impact of cyber weapons in outer space[C]//Proc. of the International Conference on Cyber Conflict, 2019. DOI: 10.23919/CYCON.2019.8756904.
5	KAPALIDIS C, FISHER M. Cyber risk management in satellite systems[C]//Proc. of the Living in the Internet of Things, 2019. DOI: 10.1049/cp.2019.0139.
6	BICHLER S F . Mitigating cyber security risk in satellite ground systems[J]. Computer Science, 2015, doi: 10.21236/ad1012754
7	ULICNY B E, MOSKAL J J, KOKAR M M, et al. Inference and ontologies[M]//Advances in information security. Switzerland: Springer, 2014: 167-199.
8	SCARPATO N , CILIA N D , ROMANO M . Reachability matrix ontology: a cybersecurity ontology[J]. Applied Artificial Intelligence, 2019, 33 (7): 643- 655. doi: 10.1080/08839514.2019.1592344
9	NOEL S, HARLEY E, TAM K H, et al. CyGraph: graph-based analytics and visualization for cybersecurity[M]//GUDIVADA V N, RAGHAVAN V V, GOVINDARAJU V, et al. Handbook of statistics. Amsterdam: Elsevier, 2016.
10	KIM H , KWON H J , KIM K K . Modified cyber kill chain model for multimedia service environments[J]. Multimedia Tools and Applications, 2019, 78 (3): 3153- 3170. doi: 10.1007/s11042-018-5897-5
11	SYED Z, PADIA A, FININ T W, et al. UCO: a unified cybersecurity ontology[C]//Proc. of the AAAI Workshop on Artificial Intelligence for Cyber Security, 2016: 195-202.
12	JIA Y , QI Y L , SHANG H J , et al. A practical approach to constructing a knowledge graph for cybersecurity[J]. Engineering, 2018, 4 (1): 117- 133.
13	FRUH C, JAH M, VALDEZ E, et al. Taxonomy and classification scheme for artificial space objects[R]. White Patterson Air Force Base, Ohio: Air Force Research Laboratory, Space Vehicles Directorate, 2013: 1-13.
14	COX A P, NEBELECKY C K, RUDNICKI R, et al. The space object ontology[C]//Proc. of the 19th International Conference on Information Fusion, 2016.
15	ROVETTO R J, KELSO T. Preliminaries of a space situational awareness ontology[C]//Proc. of the 26th AAS/AIAA Space Flight Mechanics Meeting, 2016.
16	ROVETTO R J . An ontology for satellite databases[J]. Earth Science Informatics, 2017, 10 (4): 417- 427. doi: 10.1007/s12145-017-0290-x
17	LIU B , YAO L , HAN D P . Harnessing ontology and machine learning for RSO classification[J]. SpringerPlus, 2016, 5, 1655.
18	刘斌. 基于本体的多源信息融合空间目标识别方法研究[D]. 长沙: 国防科技大学, 2018.
	LIU B. Research on multi-source information fusion based on ontology for RSO recognition[D]. Changsha: National University of Defense Tecchnology, 2018.
19	姜连祥, 李华旺, 杨根庆. 卫星自主故障诊断专家系统中知识库的设计[J]. 航天控制, 2009, (5): 93- 97.
	JIANG L X , LI H W , YANG G Q . Design knowledge base in expert system of autonomous fault diagnosis for satellites[J]. Spaceflight Control, 2009, (5): 93- 97.
20	程卓, 朱北园, 谷岩, 等. 卫星产品FMEA存在的问题及改进建议[J]. 质量与可靠性, 2011, (3): 24- 28.
	CHENG Z , ZHU B Y , GU Y , et al. Problems in FMEA of satellites product and suggestions for improvements[J]. Quality & Reliability, 2011, (3): 24- 28.
21	STROM B. Adversarial tactics, techniques and common knowledge-ATT & CK^TM[R]. Virginia: MITRE, 2015.
22	OLTRAMARI A, CRANOR L F, WALLS R J, et al. Building an ontology of cyber security[C]//Proc. of the 9th Conference on Semantic Technology for Intelligence, Defense, and Security, 2014: 54-61.
23	IANNACONE M D, BOHN S, NAKAMURA G, et al. Deve-loping an ontology for cyber security knowledge graphs[C]//Proc. of the 10th Annual Cyber and Information Security Research Conference, 2015. DOI: 10.1145/2746266.2746278.
24	MOZZAQUATRO B A , AGOSTINHO C , GONCALVES D , et al. An ontology-based cybersecurity framework for the internet of things[J]. Sensors, 2018, 18 (9): 3053.
25	MANULIS M , BRIDGES C P , HARRISON R , et al. Cyber security in new space: analysis of threats, key enabling technologies and challenges[J]. International Journal of Information Security, 2020, 20 (3): 287- 311.
26	BAILEY B, SPEELMAN R J, DOSHI P A, et al. Defending spacecraft in the cyber domain[R]. El Segundo, California: The Center for Space Policy and Strategy, 2019.
27	MICHAEL G, FOX M S. Methodology for the design and eva-luation of ontologies[C]//Proc. of the IJCAI-95 Workshop on Basic Ontological Issues in Knowledge Sharing, 1995.
28	Acoinfo. Source code archives[EB/OL]. [2021-01-20]. http://www.sylixos.com/.
29	RAZA A, SOHAL P, CADDEN J, et al. Unikernels: the next stage of Linux's dominance[C]//Proc. of the Workshop on Hot Topics in Operating Systems, 2019: 7-13.
30	Wikimedia Foundation. SpaceX Dragon 2[EB/OL]. [2021-01-20]. https://en.wikipedia.org/wiki/SpaceX_Dragon_2.
31	BARDIN J . Satellite cyber attack search and destroy[M]. Amsterdam: Elsevier, 2014.
32	MUYLAERT J, MONTE L D. Cyber security of space mi-ssions[R]. Leuven, Belgium: Energy Services Of America Corporation, 2018.
33	FOXNews. Black hat hacker says he accessed 'hundreds' of aircraft already in the sky[EB/OL]. [2021-01-20]. https://www.foxnews.com/tech/black-hat-hacker-says-he-accessed-hundreds-of-aircraft-already-in-the-sky.

知识库	制造商	供应商	运行轨道类型	星载计算机操作系统	星载计算机处理器及其架构	潜在漏洞、弱点和攻击模式
OntoCSA4Sat	√	√	√	√	√	√
OntoStar	√	√	√	×	×	×

知识库	网络空间多源信息关联分析	CAPEC关联预测	缓解措施推荐	卫星潜在漏洞、弱点和CAPEC分析	卫星网络安全风险缓解措施推荐
OntoCSA4Sat	√	√	√	√	√
CyGraph	√	√	√	×	×

[1]	何益康, 张文瀚, 王振华, 何闻. 用于卫星应急恢复的太阳电池阵转角估计方法[J]. 系统工程与电子技术, 2023, 45(3): 797-805.
[2]	沈子涵, 赵修斌, 张闯, 张良, 刘鑫贤. 基于长短期记忆神经网络的自适应容错方法[J]. 系统工程与电子技术, 2023, 45(3): 831-838.
[3]	茹鑫鑫, 高晓光, 王阳阳. 基于模糊约束的贝叶斯网络参数学习[J]. 系统工程与电子技术, 2023, 45(2): 444-452.
[4]	曾婷, 高帅, 孙富强, 赖小明, 李云, 李孝鹏. 人机环耦合效应下卫星天线装配概率风险分析[J]. 系统工程与电子技术, 2023, 45(2): 606-613.
[5]	高威, 李亚峰, 王可东. 信号级GNSS/SINS超紧组合导航仿真平台设计[J]. 系统工程与电子技术, 2023, 45(1): 184-192.
[6]	高利春, 高铭阳, 陈晓芳, 饶建兵, 费泽松, 倪少杰. 基于SINS/GBAS组合导航的高精度进近着陆导航技术[J]. 系统工程与电子技术, 2023, 45(1): 210-220.
[7]	李信, 李勇军, 赵尚弘. 基于深度强化学习的卫星光网络波长路由算法[J]. 系统工程与电子技术, 2023, 45(1): 264-270.
[8]	封皓君, 段立, 张碧莹, 刘海潮. 双向循环进化的实体链接及知识推理框架[J]. 系统工程与电子技术, 2022, 44(9): 2878-2885.
[9]	李灵慧, 李伟, 靳瑾, 匡麟玲. 5G系统对大规模NGSO卫星系统干扰分析等效建模方法[J]. 系统工程与电子技术, 2022, 44(8): 2635-2644.
[10]	骆天溯, 赵灵峰, 冯蕴雯, 薛小锋, 路成. 基于METRIC理论的超大规模卫星星座多级备份策略[J]. 系统工程与电子技术, 2022, 44(7): 2181-2190.
[11]	鲁祖坤, 郭海玉, 宋捷, 孙一凡, 李柏渝. 抗干扰型卫星导航接收机的最优前端增益[J]. 系统工程与电子技术, 2022, 44(7): 2270-2275.
[12]	王鹏博, 贺成艳, 杨倩倩, 佟文华. 窄带干扰信号对北斗三号B2信号质量的影响[J]. 系统工程与电子技术, 2022, 44(7): 2286-2292.
[13]	蚁佳才, 刘斌, 姚莉, 赵文涛. 基于知识推理的卫星网络态势理解[J]. 系统工程与电子技术, 2022, 44(5): 1562-1571.
[14]	辛立强, 张超, 赵灵芝, 刘建平. 面向复杂关联测控需求的冲突规避调度算法[J]. 系统工程与电子技术, 2022, 44(5): 1581-1588.
[15]	韩明仁, 王玉峰. 基于强化学习的全电推进卫星变轨优化方法[J]. 系统工程与电子技术, 2022, 44(5): 1652-1661.

面向太空网络战威胁的态势感知本体建模

Situational awareness ontology modeling for threat from space cyber operations

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

图/表 10

参考文献 33

相关文章 15

编辑推荐

Metrics

本文评价