网络攻击链模型分析及研究

Analysis and study of cyber attack chain model

网络攻击对网络和信息系统的危害非常大,有必要对网络攻击的过程进行研究和分析,网络攻击链模型是描述攻击的一个好的模型。网络攻击链模型描述了攻击过程,有助于进行威胁情报分析、攻击的事后分析等,其将复杂的攻击分解为相互非独有的阶段或层。通过调研大量攻击链相关学术论文,总结分析了不同的攻击链模型。同时,对攻击链模型下攻击成功概率进行了简单分析,并重点综述了基于攻击链模型的不同防御方法和手段。

Network attack is very harmful to network and information system.It is necessary to study the process of network attack and analyze it.Network attack chain model is a good model to describe the attack.The attack process was described,which is helpful for threat intelligence analysis,attack post-analysis,etc.It decomposed complex attacks into stages or layers which were not unique to each other.The different attack chain models was summarized and analyzed by investigating a large number of related academic papers.At the same time,the attack success probability under the attack chain model was analyzed,and the different defense methods and means based on the attack chain model were summarized emphatically.