In general, multiple domain cyberspace security assessments can be implemented by reasoning user's permissions. However, while existing methods include some information from the physical and social domains, they do not provide a comprehensive representation of cyberspace. Existing reasoning methods are also based on expert-given rules, resulting in inefficiency and a low degree of intelligence. To address this challenge, we create a Knowledge Graph (KG) of multiple domain cyberspace in order to provide a standard semantic description of the multiple domain cyberspace. Following that, we proposed a user's permissions reasoning method based on reinforcement learning. All permissions in cyberspace are represented as nodes, and an agent is trained to find all permissions that user can have according to user's initial permissions and cyberspace KG. We set 10 reward setting rules based on the features of cyberspace KG in the reinforcement learning of reward information setting, so that the agent can better locate user's all permissions and avoid blindly finding user's permissions. The results of the experiments showed that the proposed method can successfully reason about user's permissions and increase the intelligence level of the user's permissions reasoning method. At the same time, the F1 value of the proposed method is 6% greater than that of the Translating Embedding (TransE) method.
翻译:一般而言,多个域域网络安全评估可以通过推理用户的允许来进行,然而,虽然现有的方法包括来自物理和社会领域的一些信息,但它们并不代表网络空间的全面代表性。现有的推理方法也以专家提供的规则为基础,导致效率低下和情报水平低。为了应对这一挑战,我们建立了一个多域网络空间知识图(KG),以提供多域网络空间的标准语义描述。随后,我们提议了一个基于强化学习的用户许可推理方法。网络空间的所有许可都以节点为代表,对代理人进行培训,以根据用户初始许可和网络空间网络空间的允许,找到用户可以拥有的所有许可。我们根据网络空间空间的特征制定了10项奖励规则,以学习奖励信息设置环境,使代理人能够更好地定位用户的所有许可,避免盲目地找到用户的许可。随后,我们提出的方法表明,拟议的方法可以成功地解释用户的许可,并提高用户许可的智能水平。同时,RansiF1系统法是更大的推理方法。