基于攻击效用的复合攻击预测算法

网络攻击以复合攻击形式为主,但当前的安全设备只能检测无法预测,针对这个问题,提出了一种基于攻击效用的复合攻击预测方法,通过该方法识别攻击者的最终意图,预测攻击者下一步可能进行的攻击行为.该方法利用攻击意图描述复合攻击过程,建立了基于攻击意图的复合攻击逻辑关系图,并引入攻击效用的概念,表示入侵者在攻击过程中完成每步攻击所获得的收益的大小,是复合攻击预测的重要参考.最后,通过实验验证了该方法的有效性.

Forecast Algorithm for Multi-step Attack Based on Attack Utility

This paper presents an approach based on attack utility to recognize the attacker's finally intention and forecast the next possible attack.This paper describes a multi-attack by the attack intent,and establishes the multi-attack the logic diagram based on the attack intention.During the procedure of the attack forecast,attack utility is used to represent the attackers benefit for each attack step.The attack utility is an important reference for the multi-step attack forecast.At the end,the validity of the ...