The analysis model for exception response of information system based on CPN

The situation of attack and the vulnerability of protection can be understood by analyzing the exception response of information system which enters the exception state after the attack. The analysis framework for exception response is presented based on the working principle and operation process of information system. Aimed at solving the difficulty in modeling the exception response of information system, an analysis model for exception response of information system is built based on colored Petri nets. The model defines the message color set and the label color set in which different colors represent different properties of the normal or exception behaviors, events and process. Response component which is used to model the specific response behavior of information system is defined. Two theorems about analysis model and functional component are proved. Finally, the availability of model and functional component is verified by an application instance. It shows that the analysis model can be used to analyze the exception response, and can provide an important reference that it can rapidly return to normal after the attack and improve the security protection capability.