基于漏洞关联攻击代价的攻击图生成算法  

Algorithm of attack graph generation based on attack cost of vulnerability relations

作　　者：何江湖 潘晓中[1,2] 

机构地区：[1]武警工程大学电子技术系网络与信息安全武警部队重点实验室 [2]信息安全研究所,西安710086

出　　处：《计算机应用研究》2012年第5期1907-1909,共3页Application Research of Computers

基　　金：陕西省自然科学基金资助项目(2010JM8034);武警工程大学基金资助项目(wjy201027)

摘　　要：在已有的网络攻击图生成方法的基础上,从漏洞关联的攻击代价出发,设计了一种攻击图生成基本框架,提出了一种基于漏洞关联攻击代价的网络攻击图的自动生成算法。该算法能有效结合漏洞之间的相关性,科学地评估攻击代价,有效删除了攻击代价过高、现实意义不大的攻击路径,简化了攻击图,并通过实验检验了该算法的合理性和有效性。On the basis of existing attack graphs generation methods,this paper took the attack cost of vulnerability relations as a point of departure to design a basic framework of automatic generation of attack graph and proposed an algorithm of attack graph generation based on the attack cost of vulnerability relations.By combining the correlation between vulnerability,this algorithm made a scientific evaluation of attack cost by effectively eliminating excessive attack cost and attack path with little significance.It also simplified attack graph and examined the rationality and validity of algorithm through experiment.

关 键 词：攻击图 攻击代价 漏洞关联 自动生成 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]