基于攻击图的网络脆弱性分析方法

Method Based on Attack Graph for Network Vulnerability Analysis

传统的攻击图分析方法在计算攻击目标可达概率时没有考虑攻击者的行为特征,降低了分析结果的准确性。为了解决这个问题,首先对全局攻击图模型进行了介绍,然后提出了一种基于全局攻击图的网络脆弱性分析方法。该方法利用网络状态间的转移概率描述攻击者的行为特征。在此基础上,计算攻击目标的可达概率。实验结果表明:安全管理人员利用该方法能够从全局角度分析网络的脆弱性,获得的分析结果更加客观、准确。

Because the behavior characteristics of attackers are not considered in the traditional attack graph analysis, the accuracy of the analysis results is decreased. To solve this problem, a global attack graph model is presented, and a method for analyzing network vulnerabilities based on global attack graphs is proposed. The transition probability of network states is used to describe the behavior characteristics of attackers. The reachablity of attack targets is calculated. The experimental results show that the proposed method can analyze the overall vulnerabilities of networks, and the analysis results are more objective and accurate.