基于安全案例推理的网络安全分析方法研究与应用

当前,对复杂网络环境下容易产生的安全漏洞关联与传播问题进行分析与推理是网络安全研究的一个重要方面,文中对网络漏洞关联问题进行了分析,提出了多点漏洞的概念,采用图论的方法对多点漏洞问题进行了数学模型描述;通过对网络安全攻击案例进行建模分析,然后将网络漏洞信息组织成案例的知识表示形式,采用案例推理方法对多点之间的漏洞传播进行分析检测,并对漏洞检测中的风险进行了分析。

A Network Security Analysis Method Research and Application Based on Case-based Reasoning

At present it is an important field of network security to do researches on vulnerability relevance and propagation in the environment of network, this paper carries out research on vulnerability association problem and proposes the concept of "multi-node" vulnerability. The paper applies graph theory method to the representation of the "multi-node" vulnerability and represents information of network vulnerability as case base. The paper applies case-based reasoning to analyze and check the propagation path of the "multi-node" vulnerability in the network and carries out risk analysis in the process of analysis and checking.