面向网络架构的系统攻击面建模方法

System Attack Surface Modeling Method in Network

针对空管信息系统与互联网隔离、利用公开发布的漏洞信息不能切实体现网络安全性等问题,文章提出网络架构的空管信息系统风险评估模型。该模型综合各资源组件的端口、协议、数据进行资源节点的攻击面建模,使用贝叶斯网络为资源间的相互关系建立资源图。在上述模型的基础上,融合各资源攻击面与在资源图约束下的脆弱性严重程度为系统攻击面三元组,以表征三维度的威胁程度,计算网络结构的整体风险。在空管自动化系统中进行仿真实验,量化系统在不同攻击路径、不同维度上的威胁情况,多角度、多层次分析网络结构风险情况。实验结果表明,文章提出的系统攻击面风险评估模型具有合理性和实践有效性,为空管信息系统网络安全保障提供了指导性建议,从而在有限条件下最大限度地保障系统安全。

Aiming at the problems that the air traffic control information system is isolated from the Internet and the use of public released vulnerability information cannot effectively reflect its network security,this paper proposed a risk measurement model of air traffic management information system at the network level.The dimension of attack surface modeling had ports,protocols,data for each resource component.This model used Bayesian network to represent the relationship among resources to establish resource graph.Each resource component’s attack surface and vulnerability severity based on resource graph were fused into network attack surface triple.It represented the threat level of three dimensions and calculated the overall risk of the network architecture.Simulation experiments were carried out in the air traffic management automation system.Experiments quantified the threat situation of the system in different attack paths and dimensions.Besides,the network structure risk was analyzed from different angles and levels.Experimental results demonstrate the rationality and practical effectiveness of the proposed system attack surface risk assessment method.The attack surface model provides guidance for network security measures of air traffic management information system.Thus,security administrator can maximize system security under finite conditions.