多维网络攻击效果评估方法研究

Research on multidimensional attack effect evaluation method

针对网络攻击效果的评估问题,根据网络攻击行为的特点,提出了基于多维角度的网络攻击效果表示方法。该方法从破坏效果、信息获取及控制能力3个方面描述网络攻击效果,具有良好的普适性、全面性和扩展性。在此基础上,利用AHP灰色理论对多维网络攻击效果进行评估。该方法具有坚实的数学基础,能够对网络攻击的综合效果进行定量评估,并从攻击者角度对网络安全状况进行分析。实验结果表明了该方法在网络攻击效果评估中的实用性和高效性。

Aiming at the problems of network attack effect evaluation, a new representation of multi-dimensional perspective network attack effect based on the characteristic of network attack behavior is presented. This method describes network attack effect based on damage effect, information access and control ability. Which has fine generalization, comprehension and extension. On the basis, multidimensional attack effect is evaluated by using hierarchy-grey analytic method. This method has solid mathematical foundation and can quantitative evaluate the ability of attacker in the process of network attacks combined network attack effect and analysis the situation of network security from the perspective of attackers. Experimental results shows the effectiveness and efficiency.