基于扩展网络攻击图的网络攻击策略生成算法  

A Network Attack Decision-making Algorithm Based on the Extended Attack Graph

作　　者：王会梅[1] 鲜明[1] 王国玉[1] 

机构地区：[1]国防科技大学电子科学与工程学院,长沙410073

出　　处：《电子与信息学报》2011年第12期3015-3021,共7页Journal of Electronics & Information Technology

基　　金：国家自然科学基金(60372039)资助课题

摘　　要：该文针对网络攻防领域攻击策略生成问题的特性,从攻击者角度研究网络攻击图。根据漏洞信息对攻击模板进行实例化,维护原子攻击以及攻击的前提条件和攻击效果等因果关系,形成扩展网络攻击图,并进一步提出基于扩展网络攻击图的网络攻击策略生成算法,该算法能够动态的预测下一步网络攻击效果,求出达到该攻击效果的攻击链及其成功概率,为网络攻击过程的顺利实施提供决策支持。通过网络攻防实验,验证了网络攻击图的扩张和网络攻击策略生成算法的正确性。Considering the characteristics of attack decision-making issue in the domain of network attack and defense, the network attack graph model is extended from the view of attacker. Atomic attack is built by instantiating the attack pattern according the vulnerability. Maintaining the causality of precondition and effect condition of the atomic attack, therefore, the Extended Attack Graph （EAG） model is proposed. Furthermore, a network attack decision-making algorithm based on the extended attack graph is put forward; which can forecast attack effect dynamically and build the valid attack path and its occurrence probability through the in-depth analysis of the models＇ features. Through the network attack and defense experiments, the results show the completeness and soundness of the algorithm.

关 键 词：网络攻击 攻击模板 扩展攻击图 攻击策略 效果预测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]