一种改进的信息网络安全防御图模型及生成方法研究

Research on an Improved Information Network Security Defence Model and Production Method

研究已有防御图模型,提出一种基于假设的新型防御图模型,并给出生成方法。给出攻击模板、攻防模板和防御图算法,利用Graphviz和防御策略数据库,结合贪婪假设、单一性假设和单调性假设生成防御图,实现对网络安全状态整体真实反映,给出主动防御策略。

This paper researched the existed defense graph model,proposed a new defense graph model that based on three assumptions. This paper gave attack template,attack and defense template, the algorithm of attack graph,using Graphviz and defense policy database to generate attack and defense graph,reflects the overall security state of network,gave the active defense strategies.