网络组合攻击建模方法研究进展  

AdvancesinNetworkMulti-attackModeling

作　　者：毛捍东[1] 陈锋[1] 张维明[1] 朱承[1] 

机构地区：[1]国防科技大学信息系统与管理学院,长沙410073

出　　处：《计算机科学》2007年第11期50-55,61,共7页Computer Science

基　　金：国家自然科学基金(项目编号:70371008)资助

摘　　要：在实际的计算机网络中常常存在各种各样的脆弱性,攻击者常常利用这些脆弱性逐步入侵,最终达到攻击目标。对这种网络组合攻击进行建模的研究有利于网络安全的防护者对网络的安全状态进行安全评估和采取合理的安全措施。网络组合攻击建模方法经历了从小型网络建模向中大规模网络建模的发展,由手动建模向自动化建模的方向发展,由自然语言建模向形式化语言建模方向发展。本文总结了目前网络组合攻击建模框架及其关键技术,并对关键技术的发展现状做了介绍,最后展望了未来的发展趋势。In reality there is a variety of computer networks vulnerability, attacks are often used vulnerability gradually invasion ultimately achieve the target. This combination of network modeling study is conducive to attack the protective network security and network security were to conduct security assessments and taken reasonable safety measures. Network attack modeling experienced from small-scale network modeling to the development of the massive network modeling, from manual to automated modeling in the direction of modeling, natural language modeling to develop forreal language modeling. This paper summarizes the current multi-attack modeling framework and key technologies. Finally, the prospect of future development trend were introduced.

关 键 词：网络安全 组合攻击建模 安全评估 攻击图 原子攻击 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]