一种面向攻击图的即时验证方法

攻击图将原本孤立的攻击行为关联起来,描述潜在攻击路径,是一种网络脆弱性分析技术.现有方法通常从攻击目标节点开始进行反向搜索,找出所有可能的攻击路径,从而对网络进行安全分析.本文在攻击图的基础上,提出了一种基于正向搜索的即时验证方法.该方法快速搜索网络中的一条完整攻击路径,通常只需构造网络系统的部分状态空间,从而减轻了内...

On-the-fly Verification Method for Attack Graph

The attack graph correlates related vulnerabilities and shows potential attack paths,which is a kind of vulnerability analysis technologies.Existing methods are usually based on backward searching,which find all possible attack paths to analyze network security.Based on attack graph and forward searching,we propose an on-the-fly verification method for attack graph.As a supplement to existing methods, our approach is to find one attack path quickly,and usually only needs to construct a small portion of the state space,which relieves the memory shortage and state space explosion.The experimental results show good performance and scalability of the approach.