网络攻击效果评估研究综述

Survey of Cyber Attack Effectiveness Evaluation Research

随着网络攻击日益频繁、形式千变万化,防御者需要预测可能发生何种攻击以及对网络造成何种影响,也需要在攻击发生时了解自身网络遭受的实际损伤情况以及攻击对网络所支持的任务的影响,这就需要进行网络攻击效果评估为防御者提供科学的决策依据。首先,澄清了网络攻击效果评估的概念和研究范围。其次,针对目前网络攻击效果评估集中研究的2个部分内容:破坏效果评估和任务影响评估,分别梳理了其研究目标、相关技术方法和存在的问题。最后,对网络攻击效果评估研究中存在的问题进行了分析,指出了未来研究的方向。

As cyber attacks are becoming more frequent and diversified in forms,defenders need to predict the impact of possible attacks on the network,understand the actual damage to their network and the impact of the attack on the mission supported by the network when the attack occurs.There-fore,cyber attack effectiveness assessment is required to provide a scientific basis for the defender to make decisions.Firstly,the concept and research scope of the cyber attack effectiveness assessment are clarified in this paper.Secondly,the current cyber attack effectiveness assessment focuses on two main parts:cyber battle damage assessment and mission impact assessment.The assessing meth-ods and existing problems are analyzed respectively.Finally,the challenges of the research on at-tack effectiveness assessment are discussed,and the directions of future research are prospected.