基于攻击事件的动态网络风险评估框架研究

Research on dynamic network risk assessment framework based on attack events

运用动态网络变化理念模拟网络攻击事件是当前网络脆弱性风险评估研究领域的一门较为新兴的技术。文章在综合分析网络脆弱性风险评估研究工作的基础上,运用动态网络变化理念,构建了基于攻击事件的动态网络风险评估框架,该框架强调科学实施网段的获取处理,重视近似图抽取法的运用。然后深入探析了框架构建的四个关键环节,该框架的构建旨在为该类评估研究提供一定的参考。

In the current research field of network vulnerability risk assessment, the use of dynamic network change concepts to simulate cyber-attacks isa relatively new technology. On the basis of a comprehensive analysis of the research on the network vulnerability risk assessment, the paper uses the concept of dynamic network change to construct a dynamic network risk assessment framework based on attack events. This framework emphasizes the acquisition of scientific implementation network segments, pays attention to the approximation graph extraction method, and makes in-depth analysis of the four key aspects of the framework, which can provide certain reference for this type of assessment.