摘要
攻击者采用病毒、利用脆弱性等方式进行网络攻击,实质是其攻击权限不断扩大,进而导致系统状态变化的过程,针对这一特性,本文对原有的T-G模型和de jure重写规则进行了扩充,增加了攻击图中节点之间权限、连接关系、节点属性的描述和脆弱性重写规则,形成了DTGSA模型;通过对真实的漏洞进行建模和实验,证明此模型对攻击特征有很好的描述能力,能帮助网络管理员预测可能的攻击,进而采取相应的安全措施。
According to characteristics that attackers may use vulnerabilities and virus m attack and transfer privileges which can cause change of system states in an attack process, the T-G model and de jure rewriting rules are extended, then privileges, connections. attributes among nodes in an attack graph and vulnerability rewriting rules are introduced, therefore a dynamic take-grant network security analysis （ DTGSA ） model is proposed; Through an experiment based on modeling real vulnerabilities for a system, the results show that the model has good describing ability to characteristics of attack and shows interaction processes among attackers and entities. In addition, it can help a network administrator to predict possible attacks, and then take corresponding safety measures.
出处
《信息网络安全》
2009年第9期43-45,共3页
Netinfo Security
关键词
网络安全
网络安全分析模型
攻击图
T-G模型
重写规则
Network security
Network security analysis model
Attack graph
T-G model
Rewriting rules
