面向网络系统的脆弱性利用成本估算模型.pdfVIP

第 29 潜第8 期 计算机学报 Vo l. 29 No. 8 2006 年 8 月 CHINESE JOURNAL 0 1 COMPUTERS Aug. 2006 丽向网络系统的脆踊性利用成本估算模型 冯萍慧连一峰戴英侠李闯张颖君 〈中闺科学院研究生院信息安全国掌重点实验室 北直 100049) 摘 要 提刷吕西向网络!I统的脆弱性利用成中估算模型盟，从安全角度分析网络革缆的参数.)E佼由于网络罩统直 联所引人的关联脆满性，怒于行为规则炎联方法，构建系统状态棚，用手表示网将蕉统的脆弱伎状况在此荡础上 计算脆踊惊利用成本的期摄像，即成功利用系统脆弱性达到安全破坏目标所需消栋的成本，以此衡1i!;网络系统的 脆弱性程度. 关键诩 行为规则障;多条件组合模型，利用成本期望值s 脆剿性利用成本估算模理目 中国国lt必然得丁P3♀S An Evaluation Model of Vulnerability Exploitation Cost for Network System 1ENG Ping 日ui LIAN Yi干eng DAI Ying-Xia LI Wen ZHANG Ying-Jun (State K叩 Laboratory θf Inform时ioll. Security. Graduattl Uniwrsity 0f Chinese A问aemy οf SCie1 Abstracl The exploitation of a network system s vulnerabilities will result in secutity breach. whose possibility reflected by the exploitation cost of vulnerabilities. This paper proposes an Evaluation Model of Vulnerabìlity 1主义ploitation Cost (EMVEC) for network system. 1t analyzes attributes of a network system and locates the correlative vulnerabïlities due to inter-connections among hosts. Based on the correlatìng method 01 action rules , ;t constructs a transferrin日 graph of system states ~ to rep时5ent the vulnerable condìtions of the network system. Thereon. it comω putes the E派pectation 01 Exploitation Cost of vulnerabilities ， ι 仇， the C05t of successfully exploi- ting vulnerabilities of the system to make security breach. with the 川ltention 01 evaluating the vulnerable ex忱nt of the network system. Keywords action rule warehouse ,multi-condition combination model; expectation of exploita- tioo COst CEECl I ev.luation model of vulnerability exploitation cost CEMVEC) 频发生，给广大用户和余业造