基于主机安全组划分的网络安全性分析

Network Security Analysis Based on Host-Security-Group

针对目前网络安全分析方法中攻击图规模庞大、生成算法效率低等问题,提出了主机攻击图的生成模型和算法.基于该生成算法,进一步提出了主机安全组的概念及其划分算法.通过对网络中的主机划分安全组,实现对网络安全性的分析.实验结果证明,该分析方法能描述网络整体的安全状况,方便安全管理员找出网络中的关键主机,具有直观、高效和准确等特点.

A simple,flexible,and efficient method is proposed to generate host-based attack graph.Based on this generating algorithm,the concept of ＇host-security-group＇ is put forward,and according with its partitioning algorithm,an approach of analyzing network security by using theory of host-security-group is described.It is proved to be intuitive,efficient and accurate,as it describes the overall security situation of network and facilitates network security administrator to identify the key hosts.