Research on Network Security Quantitative Model Based on Probabilistic Attack Graph
Research on Network Security Quantitative Model Based on Probabilistic Attack Graph
复制标题
基于概率攻击图的网络安全定量模型研究
作者：
Yimin Cui;Jun;Wei Zhao;Cheng Luan
为了识别计算机网络安全威胁并综合评估其脆弱性，对网络安全的相关因素进行了研究，并对基于攻击图的方法进行了改进。在属性攻击图的基础上，加入影响网络安全的各种因素，生成概率攻击图模型。该模型利用安全设备性能数据、常见漏洞评分系统数据等计算先验概率，最终得到网络安全指标，并进行探索性分析。实验结果表明，该模型是可行和有效的。与其他脆弱性评价方法相比，该模型具有评价全面、计算简洁的特点。
In order to identify the threat of computer network security and evaluate its fragility comprehensively, the related factors of network security are studied, and the methods based on attack graph are improved. Based on the attribute attack graph, the probabilistic attack graph model is generated by adding various factors which affect network security. The model uses security equipment performance data, common vulnerability scoring system data and etc. to calculate priori probability, finally obtains the network security index, and carries on the exploratory analysis. The experimental results show that the model is feasible and effective. Compared with other vulnerability assessment methods, the model has the characteristics of comprehensive evaluation and concise calculation.