基于动态攻击图的网络安全实时评估

发布时间：2018-03-14 18:35

本文选题：动态攻击图　切入点：实时评估　出处：《计算机科学》2013年02期 　论文类型：期刊论文

【摘要】：针对网络安全评估对实时性及可视化的需求,提出了一种基于动态攻击图的实时评估方法。首先通过采集网络的脆弱性、网络拓扑、资产价值等安全属性信息,同时提取入侵检测系统的报警信息、防火墙策略、安全管理等动态攻防对抗信息,生成动态攻击图,并实时调整防御手段对网络进行及时、有效的保护,实时地对网络系统的安全状态进行评估,并采用可视化的方法展现评估结果,在此基础上给出整体安全策略调整建议。最后通过实验证明了本方法的可行性和有效性。
[Abstract]:According to the requirement of real-time and visualization of network security assessment, a real-time evaluation method based on dynamic attack graph is proposed. Firstly, security attribute information such as network vulnerability, network topology, asset value and so on are collected. At the same time, it extracts the alarm information, firewall strategy, security management and other dynamic attack and defense information of intrusion detection system, generates dynamic attack graph, and adjusts the defense means to protect the network in time and effectively. The security state of the network system is evaluated in real time, and the evaluation results are presented by visual method. Finally, the feasibility and effectiveness of the method are proved by experiments.
【作者单位】：中国电子科技集团公司电子科学研究院;
【基金】：国防基础科研项目(A0420110006)资助
【分类号】：TP393.08

【参考文献】