欢迎来到天天文库
浏览记录
ID:32352518
大小:751.60 KB
页数:13页
时间:2019-02-03
《一种基于攻击意愿分析的网络风险动态评估模型》由会员上传分享,免费在线阅读,更多相关内容在工程资料-天天文库。
1、计算机研究与发展DOI:10.7544?issn1000-1239.2015.20140177JournalofComputerResearchandDevelopment52(9):2056-2068,2015一种基于攻击意愿分析的网络风险动态评估模型马春光汪诚弘张东红李迎涛(哈尔滨工程大学计算机科学与技术学院哈尔滨150001)(machunguang@hrbeu.edu.cn)ADynamicNetworkRiskAssessmentModelBasedonAttackersInclinationMaCh
2、unguang,WangChenghong,ZhangDonghong,andLiYingtao(CollegeofComputerScienceandTechnology,HarbinEngineeringUniversity,Harbin150001)AbstractThisarticleproposesanewdynamicnetworkriskanalysismodelbasedonattackersinclinationinordertosolvesomeproblemsofthetraditiona
3、lriskanalysismethodbasedonattackgraph.Traditionalattackgraphbasedonriskassessmentmethodrelieshighlyontheknownvulnerabilitydatabaseandonlyanalyzestheatomicattacksattributeregardlessoftherelationshipbetweenattackstrategiesandattackersinclination.Inourmodelwet
4、akeboththeexistingvulnerabilitiesandunknownthreatensintoconsideration,thenevaluatetheattackerspressuresduringdifferentattackperiodssothatwequantizetheattackersinclinationdynamicallyunderthenetworkenvironment.Then,weaddtheattackersinclinationfactorsandatomic
5、attackattributesintographbasedriskassessmentmodel,andwecreateanewtypeofattackgraphusingattackersinclinationfactors.FinallywesetupadynamicriskassessmentmethodbyusingBayesianreasoningengine.WeconvertourstaticattacktothedynamicBayesianattackgraph,andusetheposte
6、riorprobabilitycomputedbyBayesianreasoningenginetorealizethedynamicriskassessment.Weestablishareal-worldexperimentenvironmenttosimulateourdynamicriskassessmentmodelbasedonattackersinclinationandvalidateitsfunction.Experimentalresultsdemonstratetherationality
7、ofthismodel,andprovethatthissystemismoresuitableforreal-timeriskassignmentundertheactualnetworkenvironment.KeywordsBayesianattackgraph;attackpressure;attackersinclination;potentialthreats;riskassessment摘要针对目前利用攻击图进行风险评估时,存在过于依赖已知漏洞知识库、仅仅利用原子攻击本质属性进行量化分析而没有很好
8、地关联攻击者主观的攻击意愿等问题,提出了一种基于攻击者攻击意愿分析的动态风险评估模型.通过融合已知威胁和潜在威胁构建原子攻击库,分析在系统网络环境下不同时期攻击者所面临的攻击压力,量化攻击者决策时的攻击意愿,将攻击意愿和原子攻击本身的攻击性质加入到贝叶斯网络攻击图的动态推理模型中.实验证明了该模型的合理性,并且该系统更适合于实际网络环境下的实时风险评估.关键词贝叶斯攻击图
此文档下载收益归作者所有