基于路径收益计算的网络攻击路径行为分析方法  

Path Behavior Analysis Method of Network Attack Based on Path Revenue Calculation

作　　者：王辉[1] 王哲[1] 刘淑芬[2] WANG Hui WANG Zhe LIU Shufen(College of Computer Science and Technology, Henan Polytechnic University, Jiaozuo 454000, Henan Province, China College of Computer Science and Technology, Jilin University, Changchun 130012, China)

机构地区：[1]河南理工大学计算机科学与技术学院,河南焦作454000 [2]吉林大学计算机科学与技术学院,长春130012

出　　处：《吉林大学学报（理学版）》2017年第2期311-321,共11页Journal of Jilin University:Science Edition

基　　金：国家自然科学基金(批准号:61472160);国家科技支撑计划项目(批准号:2014BAH29F03)

摘　　要：提出一种基于攻击可行性分析的攻击路径生成方法,解决了攻击图中攻击路径存在路径冗余而导致的节点置信度计算不准确问题.通过对基于Bayes推理的似然加权算法进一步改进,能更准确地计算节点的置信度.实验结果表明,改进后的算法有效消除了攻击图中的冗余路径,从而提高了节点置信度的准确性,实现了对攻击路径的有效预测分析.We proposed an attack path generation method based on attack feasibility analysis to solve the problem of attack path existing redundancy caused inaccurate calculation of nodes confidence in attack graph. By further improving likelihood weighting algorithm based on Bayesian inference, the algorithm could calculate the nodes confidence more accurately. Experimental results show that the improved algorithm effectively eliminates the redundant paths in the attack graph, thereby improving the accuracy of nodes confidence, and realizing the effective predictive analysis of the attack path.

关 键 词：信息安全技术 路径的有效预测 路径收益计算 攻击可行性 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]