基于最大可能攻击路径的校园网络安全态势感知研究  

Research on Campus Network Security Situation Awareness Based on Maximum Possible Attack Path

作　　者：尹然然[1] 杨振宇 YIN Ranran;YANG Zhenyu(Department of Urban Rail Transit and Information Engineering,Anhui Communications Vocational and Technical College,Suzhou 230051,China)

机构地区：[1]安徽交通职业技术学院城市轨道交通与信息工程系,安徽宿州230051

出　　处：《许昌学院学报》2025年第2期123-128,共6页Journal of Xuchang University

摘　　要：针对现有方法存在的攻击路径识别性能差、安全态势感知精度低等问题,提出基于最大可能攻击路径的校园网络安全态势感知方法.以校园网络拓扑为基础,生成所有可能的攻击路径,综合考虑多个因素计算攻击路径威胁程度,确定威胁程度极大值对应路径为最大可能攻击路径,在其各个节点处采集校园网络运行数据,选取安全态势感知指标,基于熵值法计算指标权重数值,制定安全态势等级划分标准,从而获得安全态势等级感知结果.由实验结果可知:应用提出方法确定的最大可能攻击路径与实际最大可能攻击路径重合,校园网络安全态势等级感知结果与实际结果相同.Aiming at the problems of poor performance of attack path identification and low accuracy of security situation awareness in existing methods,a research on campus network security situation awareness based on maximum possible attack path is proposed.Based on the campus network topology,all possible attack paths are generated,and multiple factors are comprehensively considered to calculate the threat degree of the attack path.The path corresponding to the maximum threat degree is determined to be the maximum possible attack path.The campus network operation data is collected from each node,the security situation awareness index is selected,and the weight value of the index is calculated based on entropy method.The security situation classification standard is established to obtain the security situation awareness result.The experimental results show that the maximum possible attack path determined by the proposed method overlaps with the actual maximum possible attack path,and the perceived result of campus network security situation level is the same as the actual result.

关 键 词：网络攻击路径 态势指标选取 安全态势感知 路径威胁评估 

分 类 号：TP399[自动化与计算机技术—计算机应用技术]