基于APT潜伏攻击的网络可生存性模型与分析

Modeling and Analysis for Network Survivability of APT Latent Attack

基于传统网络攻击模式和高级持续性威胁(Advanced Persistent Threat,简称APT)攻击模式提出网络可生存性的评估模型.建立网络攻击场景,仿真验证提出的网络可生存性模型,并比较两种模式的性能.得到的结论:提出的评估模型合理刻画了网络可生存性的两个重要参数,网络攻击传播速率和网络修复速率;基于APT潜伏攻击模式下的网络可生存性性能低于传统攻击模式.

The paper proposes the model of network survivability based on the patterns of normal network attack and APT attack. The model is demonstrated by constructing the simulation scenarios of network attack to analyze their performances. The results showthat this evaluation model can effectively reflect two parameters： the speeds of network attack propagation and network recovery,and the performance of network survivability of APT attack pattern is lower than that of normal attack pattern.