本文選題：網(wǎng)絡(luò)攻擊 + 攻擊圖��； 參考：《微電子學(xué)與計算機》2016年02期

【摘要】：提出了一種基于攻擊圖模型的網(wǎng)絡(luò)可能入侵估計方法.該方法先將以往每次成功的網(wǎng)絡(luò)入侵行為都當(dāng)作一次網(wǎng)絡(luò)狀態(tài)的變遷,并以此為依據(jù)定義網(wǎng)絡(luò)攻擊圖、網(wǎng)絡(luò)入侵路徑、網(wǎng)絡(luò)攻擊行動,并預(yù)測攻擊者下一次入侵目標(biāo)的可能性和選擇入侵路徑的可能性,在此基礎(chǔ)上融合已知和潛在的網(wǎng)絡(luò)入侵威脅因素構(gòu)建網(wǎng)絡(luò)入侵的原子攻擊庫,計算系統(tǒng)網(wǎng)絡(luò)環(huán)境下入侵者所面臨的攻擊壓力與收益期望,對網(wǎng)絡(luò)入侵者在決策時的攻擊意愿進行量化,以量化后的結(jié)果為基礎(chǔ)建立網(wǎng)絡(luò)可能入侵估計風(fēng)險模型,利用該模型給出網(wǎng)絡(luò)可能入侵估計量化的風(fēng)險值,從而有效地完成對網(wǎng)絡(luò)可能入侵的估計.實驗仿真證明,基于攻擊圖模型的網(wǎng)絡(luò)可能入侵估計方法具有良好的可行性和有效性,可大幅減少不可信報警數(shù)量.
[Abstract]:In this paper, a network possible intrusion estimation method based on attack graph model is proposed. This method regards every successful network intrusion behavior as a change of network state, and defines the network attack graph, network intrusion path, network attack action according to the network attack graph, network intrusion path and network attack action. It also predicts the possibility of the attacker's next invasion target and the possibility of choosing the invasion path. On this basis, the atomic attack library of the network intrusion is constructed by combining the known and potential network intrusion threat factors. The attack pressure and profit expectation of the intruder in the network environment are calculated. The network intruder's intention to attack in the decision-making is quantified, and the risk model of the network possible intrusion estimation is established based on the quantized results. By using this model, the quantization risk value of network possible intrusion estimation is given, so that the estimation of possible network intrusion can be completed effectively. The simulation results show that the network likelihood intrusion estimation method based on attack graph model is feasible and effective, and can greatly reduce the number of untrusted alerts.
【作者單位】： 呼倫貝爾學(xué)院計算機科學(xué)與技術(shù)學(xué)院;
【分類號】：TP393.08

【相似文獻】

相關(guān)期刊論文 前10條

1 冉曉e，

本文編號：1827841