攻击树模型中事件匹配的可信度计算  

Reliability calculation of event matching in attack tree model

作　　者：蒋励[1] 张家录[1] 

机构地区：[1]湘南学院信息化办,湖南郴州423000

出　　处：《邵阳学院学报（自然科学版）》2016年第2期41-45,共5页Journal of Shaoyang University：Natural Science Edition

基　　金：湖南省教育厅科学研究重点项目(No.2014A135);湖南省十二五教育规划项目(XJK013BGD053)

摘　　要：基于攻击意图将基于攻击行为的报警事件转换为基于攻击意图的报警事件,减少事件的种类,使之更易于在组合攻击知识库中进行匹配.提出了一个基于组合攻击知识库的事件匹配和可信度计算算法,该算法将报警事件与组合攻击知识库的攻击模型进行匹配,预测可能的组合攻击并计算可信度,提高了匹配效率.Based on the attack intention , the warning event is converted to an alarm event based on the intention of the attack ,and the type of the event is reduced ,which makes it easier to match in the knowledge base of the combined attack .Put forward a match event with the combination of the attack knowledge base and credibility based on computational algorithms , the algorithm will alarm events with combinational attack knowledge base attack model matching to predict possible combinations of attack and calculate the reliability , improve the matching efficiency .

关 键 词：组合攻击 攻击树模型 事件匹配 可信度 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]