基于全网攻击模型的攻击策略挖掘与危险评估  

Attack strategy digging and risk evaluation based on global network attack model

作　　者：王纯子[1] 张斌[2] 黄光球[2] 

机构地区：[1]西安工程大学管理学院,西安710048 [2]西安建筑科技大学管理学院,西安710055

出　　处：《计算机工程与应用》2012年第4期1-4,53,共5页Computer Engineering and Applications

基　　金：陕西省重点学科建设专项资金资助项目

摘　　要：针对复杂网络攻击建模的不足,提出一种基于对象Petri网的全网攻击模型。通过对精确路径和粗糙路径的定义,提出了全网攻击模型的自动生成和路径挖掘算法。攻击路径集综合反映了不完备信息下主机间的确定攻击关系和可能攻击关系,结合攻击效能和路径粗糙度指标给出了定量的网络危险评估方法。Aiming at the deficiency of complex network attack model, this paper proposes a global network attack model based on object Petri net. By the definition of accurate path and rough path, an automatic generation of the model and path digging algorithm is pre- sented. The attack path set reflects the certain and uncertain attack relationship under incomplete information. Combined with attack performance and path rough degree, a quantitative network risk evaluation method is given.

关 键 词：网络安全 全网攻击模型 对象PETRI网 粗糙攻击路径 危险性评估 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]