大规模网络中攻击图自动构建算法研究

发布时间：2018-08-28 13:48

【摘要】：随着计算机技术和网络通信技术的飞速发展,网络安全形势日趋严峻.攻击者往往采取多步骤网络攻击的方式对网内多个漏洞实施逐步击破,而攻击图正好刻画了目标网络内潜在威胁的传播路径.针对目前攻击图构建算法无法很好地适用于大规模目标网络的问题,通过深入分析传统攻击图构建算法的不足和目标环境的特点,提出了一种新的构建攻击图的方法.首先,采用攻击图建模语言(Attack Graphs Modeling Language,AGML)形式化描述漏洞知识库和目标环境;其次,提出了目标环境的预处理技术,为目标环境中的属性建立索引,然后利用攻击模式的实例化技术构建攻击图.通过对该算法的时间复杂度分析和模拟实验验证,表明该算法具有良好的可扩展性,能够为具有复杂网络拓扑结构的大规模目标网络自动构建攻击图.
[Abstract]:With the rapid development of computer technology and network communication technology, the network security situation is becoming more and more serious. Attackers often use multi-step network attacks to gradually break out multiple vulnerabilities in the network, and the attack graph precisely describes the propagation path of potential threats in the target network. Aiming at the problem that the current attack graph building algorithm can not be well applied to large-scale target network, a new attack graph construction method is proposed by analyzing the shortcomings of the traditional attack graph construction algorithm and the characteristics of the target environment. Firstly, the vulnerability knowledge base and target environment are described formally by using attack graph modeling language (Attack Graphs Modeling Language,AGML). Secondly, the preprocessing technology of target environment is proposed to index the attributes in the target environment. Then the attack graph is constructed by instantiation of attack pattern. The time complexity of the algorithm is analyzed and the simulation results show that the algorithm is extensible and can automatically construct attack graph for large-scale target network with complex network topology.
【作者单位】：国防科学技术大学计算机学院;
【基金】：国家“八六三”高技术研究发展计划基金项目(2009AA01Z436,2007AA010502)
【分类号】：TP393.08

【参考文献】