一种面向攻击效果的网络安全态势评估方法

A Network Security Situation Assessment Approach on Attack Effect

基于攻击和威胁的网络安全态势评估模型已经成为研究热点,攻击数量和攻击造成的影响效果是两个重要的确定态势值的因素。利用攻击数量因素来确定态势值已经得了良好的效果。但是从攻击对系统影响角度来确定态势值方面,仍然考虑不够。本文首先基于层次化网络安全态势评估模型,介绍利用攻击数量来计算网络安全态势值的公式。然后分析攻击对系统造成影响,利用攻击影响对公式修正,推导出充分考虑攻击数量和影响效果的公式。通过实验证明修正后的公式更加能反映实际情况。

Attack amount and attack effect are two important factors to determine network security situation value. Numbers of methods based on attack amount factor have been put forward. These methods have reflected good results. On the other hand, attack effect factor is not considered fully. The paper introduces network security situation value formulas that are determined by attack amount factor based on a hierachical model. Then analyze attack effect to system, mend the above formulas in accordance with attack effect factor. Formulas that consider attack amount and attack effect will be obtained. A simulation test is done to validate that the mended formulas are fitter to practical situation.