基于多阶段攻击的网络安全风险评估方法  

Method of Network Security Risk Assessment Based on Multi-stage Attack

作　　者：李冬冬[1] 王雄[1] 

机构地区：[1]北京电子科技学院信息安全系,北京100070

出　　处：《通信技术》2007年第11期283-285,共3页Communications Technology

摘　　要：网络安全风险评估技术能够检测网络系统潜在的安全漏洞和脆弱性,评估网络系统的安全状况,是实现网络安全的重要技术之一。文中对基于多阶段攻击的网络安全风险评估方法进行了研究,给出了多阶段攻击的网络安全风险评估方法的评估过程,分析了该评估方法中的关键参数,构建了基于多阶段攻击的网络安全风险评估的模型,最后通过实践验证了该方法的有效性,一定程度上提高了评估结果的准确性和一致性。Since it can detect potential vulnerabilities and give the security condition of network system, the technique of network security assessment has become one of the most important techniques to realize network security. A method of network security risk assessment based on multi-stage attack is proposed in this paper. The steps of this method are given, the key parameters analyzed, and the assessment model constructed. Finally, the model established in the paper is proved to be effective and can properly improve the precision and consistency of assessment.

关 键 词：网络安全 风险评估 多阶段攻击 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]