一种新颖的自动化攻击图生成方法

A Novel Technology of Automatic Generation of Attack Graph

攻击图在网络安全评估和防御方面,占有重要地位。通过对攻击图的分析,网络管理者可以预知网络脆弱程度,采取加强网络安全性的措施。基于原子域的攻击图生成算法,其在生成时间复杂度和扩展性方面具有实用性的优势;本文通过对网络评估系统的介绍,重点介绍基于原子域的攻击图生成系统在网络安全评估中的应用设计与实现,同时对基于原子域生成系统进行性能测试。

Attack Graph act crisis role on internet security estimation and anti-virus defense.By analyzing on the attack graphs,network administrators can estimate the threshold on the network and then come out measures on improving the relevant defect.We have announced the Algorithm on Generating the Attack Graph（AGAG） based on atomic domain.AGAG shows its practical strength on reducing time complexity and its flexibility on extendibility.This paper proposes a collaborative framework and implementation on Attack Graph Generation System（AGGS） for Internet security measurements and estimation.We also evaluated the system by conducting experiments on atomic domain,the analysis on mainly on its time complexity is also included in this paper.