一种基于攻防图的网络安全防御策略生成方法

发布时间：2018-06-16 23:59

本文选题：攻防图 + CVSS　；参考：《计算机科学》2016年10期

【摘要】：复杂的网络多步攻击是当前典型的强目的性网络攻击方式,状态攻防图技术是对其进行建模分析的一种有效方案。但是,当前主流的状态攻防图技术在实施过程中存在众多局限性,如原子攻击成功概率的计算、攻击危害指数定义,使得在实际应用中如果实施人员的经验不足,则很难反映出真实网络安全态势。分析现有基于状态攻防图的网络安全防御策略生成方法的不足,改进脆弱点危害评分标准,引入攻击累计成功概率及主机信息资产值的概念,重新定义原子攻击危害指数与攻击路径危害指数的计算方式,对安全策略生成所需考虑的因素进行扩充,对安全策略的生成方法进行优化,实现攻击场景建模和攻击意图挖掘。最后通过算例分析验证了改进的方法更加易于实施和客观分析,为管理人员做出合理的防御决策提供了有效的辅助。
[Abstract]:The complex network multi-step attack is a typical strong purposive network attack mode at present, and the state attack and defense graph is an effective scheme for modeling and analyzing it. However, the current mainstream state attack and defense map technology has many limitations in the process of implementation, such as the calculation of successful probability of atomic attack, the definition of attack damage index, and the lack of experience in practical application. It is difficult to reflect the real network security situation. This paper analyzes the shortcomings of the existing network security defense strategy generation method based on the state attack and defense graph, improves the vulnerability point hazard score standard, and introduces the concepts of attack cumulative success probability and host information asset value. The calculation method of atomic attack hazard index and attack path damage index is redefined, the factors that need to be considered in the generation of security policy are expanded, the method of security policy generation is optimized, and the attack scene modeling and attack intention mining are realized. Finally, an example is given to verify that the improved method is more easy to implement and objective analysis, and provides an effective aid for managers to make reasonable defense decisions.
【作者单位】：南京理工大学计算机科学与工程学院;
【基金】：国家自然科学基金项目(61272419)资助
【分类号】：TP393.08

【相似文献】