基于贝叶斯攻击图的网络安全量化评估研究

发布时间：2018-07-03 14:36

本文选题：贝叶斯攻击图 + 脆弱点　；参考：《计算机应用研究》2013年09期

【摘要】：针对攻击图在评估网络安全时节点关系复杂、存在含圈攻击路径、只能反映网络静态风险等问题,将攻击图与贝叶斯理论结合,提出贝叶斯攻击图的概念,简化了攻击图并通过优化算法避免了含圈路径的产生;通过引入攻击证据与CVSS评分系统,提出了一种新的面向脆弱点的网络安全量化评估方法,基于贝叶斯攻击图对网络整体及局部的安全状况进行实时动态评估。通过在实际网络中的实验验证了该方法的可行性及有效性,与传统评估方法相比,该方法能够动态地反映网络安全的态势变化情况。
[Abstract]:In order to solve the problem that the attack graph can only reflect the static risk of the network, because of the complexity of the node relationship when evaluating the network security, the concept of Bayesian attack graph is put forward by combining the attack graph with Bayesian theory, which contains the loop attack path and can only reflect the static risk of the network. The attack graph is simplified and the loop path is avoided by optimizing algorithm. By introducing attack evidence and CVSS scoring system, a new network security quantitative evaluation method for vulnerable points is proposed. Based on Bayesian attack graph, the whole and local security of the network is evaluated dynamically and in real time. The feasibility and effectiveness of the proposed method are verified by experiments in practical networks. Compared with the traditional evaluation methods, this method can dynamically reflect the situation of network security.
【作者单位】：空军工程大学信息与导航学院指挥系统技术教研部;西安通信学院;
【基金】：国家自然科学基金资助项目(61272486)
【分类号】：TP393.08

【参考文献】