Threat Modeling-Oriented Attack Path Evaluating Algorithm  

作　　者：李晓红 刘然 冯志勇 何可 

机构地区：[1]School of Computer Science and Technology,Tianjin University

出　　处：《Transactions of Tianjin University》2009年第3期162-167,共6页天津大学学报（英文版）

基　　金：Supported by National Natural Science Foundation of China (No.90718023);National High-Tech Research and Development Program of China (No.2007AA01Z130)

摘　　要：In order to evaluate all attack paths in a threat tree,based on threat modeling theory,a weight distribution algorithm of the root node in a threat tree is designed,which computes threat coefficients of leaf nodes in two ways including threat occurring possibility and the degree of damage.Besides,an algorithm of searching attack path was also obtained in accordence with its definition.Finally,an attack path evaluation system was implemented which can output the threat coefficients of the leaf nodes in a target threat tree,the weight distribution information,and the attack paths.An example threat tree is given to verify the effectiveness of the algorithms.In order to evaluate all attack paths in a threat tree, based on threat modeling theory, a weight distribution algorithm of the root node in a threat tree is designed, which computes threat coefficients of leaf nodes in two ways including threat occurring possibility and the degree of damage. Besides, an algorithm of searching attack path was also obtained in accordence with its definition. Finally, an attack path evaluation system was implemented which can output the threat coefficients of the leaf nodes in a target threat tree, the weight distribution information, and the attack paths. An example threat tree is given to verify the effectiveness of the algorithms.

关 键 词：attack tree attack path threat modeling threat coefficient attack path evaluation 

分 类 号：TP301.6[自动化与计算机技术—计算机系统结构]