应用不完整攻击图分析的风险评估模型

A Risk Assessment Model Using Incomplete Attack Graphs Analysis

为了解决完整攻击图分析法存在的滞后性问题,对攻击图分析进行研究.引入不确定及未知信息因素,实现不完整攻击图分析(IAGA),提出一种基于不完整攻击图分析的风险评估模型(IAGARAM),动态反映系统实际风险状况,有效阻止损害信息系统的入侵行为,适用于整个企业业务生命周期.

To solve the hysteresis problem of complete attack graphs analysis method,the existing attack graphs analysis is researched.By importing uncertain and unknown information,an incomplete attack graphs analysis（IAGA） method is proposed.A risk assessment model based on IAGA（IAGARAM） is also proposed,that will prevent asset losses from real intrusion activities,and is applicable to the business life cycle.