攻击树模型中事件匹配的可信度计算

Reliability calculation of event matching in attack tree model

基于攻击意图将基于攻击行为的报警事件转换为基于攻击意图的报警事件,减少事件的种类,使之更易于在组合攻击知识库中进行匹配.提出了一个基于组合攻击知识库的事件匹配和可信度计算算法,该算法将报警事件与组合攻击知识库的攻击模型进行匹配,预测可能的组合攻击并计算可信度,提高了匹配效率.

Based on the attack intention , the warning event is converted to an alarm event based on the intention of the attack ,and the type of the event is reduced ,which makes it easier to match in the knowledge base of the combined attack .Put forward a match event with the combination of the attack knowledge base and credibility based on computational algorithms , the algorithm will alarm events with combinational attack knowledge base attack model matching to predict possible combinations of attack and calculate the reliability , improve the matching efficiency .