一种计算机网络脆弱性评估系统的设计

以攻击图建模方法为基础，提出了一种综合利用网络安全评估工具、模型检验工具的计算机网络脆弱性评估系统的设计方案。给出了脆弱性评估系统的总体框架结构，分析了各模块的功能特点和结构组成。该脆弱性评估系统可以分析计算机网络系统的最薄弱环节、最隐蔽被攻击路径、最易被攻击路径和最常被攻击路径，可以有效指导计算机网络系统安全措施制定与改进。

Design of a Computer Network Vulnerability Evaluation System

A computer network vulnerability evaluation system is designed based on attack graph modeling method, The computer network security evaluation tools and model check tools are integrated in the system. The block scheme of the computer network vulnerability evaluation system is proposed. The function and structure of all modules are analyzed in detad. The vulnerability evaluation system is able to analyze the weakest node, the most covert attack path. the most possible attack path, and the most frequent attack path. The vulnerability evaluation system can be used to establish and improve security measures of computer network systems effectively.