基于攻击图节点概率的网络安全度量方法

为了保护网络中关键信息资产, 评估分析网络的整体安全性, 提出了一种基于攻击图节点概率的网络安全度量方法。该方法改进了原子攻击节点自身概率的计算模型, 引入累积可达概率, 在此基础上, 研究了网络安全风险评估模型。实验结果表明, 所提评估方法能够准确地评估目标状态的安全级别和网络的整体风险。

Network security assessment based on probabilities of attack graph nodes

To protect critical information resources in networked environment and evaluate the overall security of network, this paper paper proposed a approach to network security assessment based on probabilities of attack graph nodes. By improving individual probability's computational model of atomic attack and introducing cumulative reachable probability of nodes in the attack graph, it proposed the assessment model of network security risk. Experimental results show that the proposed approach can accurately assess the security level of target states and overall security risk of network.