攻击图和HMM结合的网络安全风险评估方法研究  

Research on Network Security Risk Assessment Method Combined with Attack Graph and HMM

作　　者：刘仁山[1] 孟祥宏[1] 

机构地区：[1]呼伦贝尔学院计算机科学与技术学院,内蒙古呼伦贝尔021008

出　　处：《信阳师范学院学报（自然科学版）》2015年第1期146-150,共5页Journal of Xinyang Normal University(Natural Science Edition)

基　　金：内蒙古自然科学基金项目(2011BS0905);国家社会科学基金资助项目(11XTQ009);内蒙古高校科学研究项目(NJZC14309)

摘　　要：为了解决传统网络安全风险评估不能有效评价网络安全风险动态变化的缺点,根据网络安全的特性,提出了攻击图和隐马尔可夫模型(HMM)相结合的网络安全风险评估方法.采用攻击图生成网络攻击路径,从复杂度和防御能力等方面量化攻击威胁等级,利用隐马尔可夫模型计算攻击路径的攻击成功率,结合网络资产的重要程度确定网络安全风险值.通过实例分析表明,该方法能够提高网络安全风险评估的准确性,能够有效地对网络安全状况进行分析,具有较高的实用性.In order to solve the shortcomings that traditional network security risk assessment can not evaluate the network security risk effectively and dynamically , according to the characteristics of network security , the network se-curity risk assessment method combined with attack graph and hidden Markov model was proposed .The attack graph generated the network attack path ,the attack threat level was quantified from the aspects of complexity and defense abil -ity, the attack success rate of the attack path was calculated using a hidden Markov model , the network security risk value was determined with the importance of network assets .The research example showed that the method can improve the accuracy of network security risk assessment , analyze effectively the network security situation , and has higher practicability .

关 键 词：网络安全 攻击图 隐马尔可夫模型 复杂度 风险评估 攻击路径 威胁等级 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]