基于累积效应的网络脆弱性扩散分析方法  

New network vulnerability diffusion analysis method based on cumulative effect

作　　者：李艳[1] 黄光球[1] 张斌[1] 

机构地区：[1]西安建筑科技大学管理学院,西安710055

出　　处：《计算机应用》2015年第8期2169-2173,共5页journal of Computer Applications

基　　金：陕西省科学技术研究发展计划项目(2013K1117);陕西省重点学科建设专项资金资助项目(E08001);陕西省教育厅科技计划项目(12JK0789)

摘　　要：网络脆弱性评估是一种主动防范技术,意在攻击发生之前对安全态势进行分析进而制定防御措施,但传统的定量分析模型不能对实体间动态交互关系有很好的展现,而且大都不能得出风险扩散的全局化结果。将脆弱性扩散过程类比于社会网络中影响力传播过程,提出了基于累积效应的网络脆弱性扩散分析方法,定义的脆弱性扩散分析模型给出了细粒度级的主体关系结构,利用攻击效果累积特性提出的分析算法可以更准确地刻画脆弱性扩散规则,保证更好的影响范围。最后对该模型和算法进行了实例验证,在模型描述简洁性、分析结果准确性、安全建议合理性等方面的横向比较分析,验证了模型在评估结果直观性和制定成本最小安全措施等方面的优势。Network vulnerability assessment which intends to safety situation analysis and establishment of defensive measures before attack is a kind of active defense technology, but the traditional quantitative analysis models cannot show the dynamic interactive relationship between entities, and most of them cannot get global results for risk diffusion. With reference to the influence of social network in the process of communication, a new network vulnerability diffusion analysis method based on cumulative effect was proposed. The defined vulnerability diffusion analysis model described subject relation structure in a more detailed level, and the algorithm proposed by using the accumulation characteristics in attack effects described vulnerability diffusion nile more accurately to ensure better influence range. At last, the model and algorithm were verified by a typical example, the horizontal comparison analysis on some aspects such as simplicity of the model description, accuracy of the analysis results, rationality of the safety recommendations were given. The results show that the method has an advantage in visual assessment results and the formulation of the cost minimum security measures.

关 键 词：脆弱性扩散 网络风险评估 网络安全 累积效应 攻击模型 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP309.5[自动化与计算机技术—计算机科学与技术]