基于全局权限图的网络风险评估模型

A Network Risk Assessment Model Based on Network Global Privilege Graph

提出一种全局网络权限图的概念和生成方法,基于网络权限图建立了一种新的网络风险评估模型,结合虚构的网络环境,对上述生成算法和网络评估模型加以验证.结果表明:与常规评估方法相比,由于引入了漏洞的量化数据等网络安全配置信息,该方法的评估结果更为精确.

A concept of global network privilege graph and its generation method were proposed.Then a novel network risk assessment model based on privilege graph was proposed.The algorithm and model were verified using a demonstrative network.The results show that the assessment achieved by the model is more exact than common methods because the model considers the quantitative data of vulnerabilities and other security configuration information.