一种基于主机的攻击危害度定义方法

A Method of Defining Attack Severity Based on Host System

在研究攻击危害度的基础上,将主机系统实际受损情况作为计算攻击危害度的重要因素,提出了一种基于主机受损度的攻击危害度定义方法;并在计算系统实际受损度时,提出了日志分析树概念和系统受损分析规则,并通过实例验证了规则的有效性。

Based on the attack severity research, the host system damage degree as an important influence factor has been considered. The paper proposes an attack severity evaluation approach on host system damaged degree. A log analysis tree and analysis rules of system damaged are also proposed when calculating the host system damage degree, and its validation is tested by instances.