基于攻击能力增长的网络安全分析模型.pdfVIP

计算机研究与发展 ISSN 1000．1239／CN 11．1771|TP Journal of Computer Research and Development 44(12)：2012--2019，2007 基于攻击能力增长的网络安全分析模型 张海霞 苏璞睿 冯登国 (中国科学院软件研究所信息安全国家重点实验室 北京 100080) (zhanghx@is．iscas．ac．cn) A Network Security Analysis Model Based on the Increase in Attack Ability Zhang Haixia，Su Purui，and Feng Dengguo (StateKeyLaboratory ofInformation Security，Institute ofSoftware，ChineseAcademyofSciences，Betjing 100080) Abstract In recent years，network vulnerability analysis，which is attracting more and more domestic researchers and foreign researchers，has become a hotspot in the field of information security．A new model of network security analysis based on the increase in attack ability is proposed．It takes into account the 、network environment and simulates the attacker’S behavior，and considers improving the attack ability as attacker’S ultimate target to generate attack graph．The method used to represent attack graph make the attack target more clear，because it uses the attack ability’S increment to describe a goal，which is more accurate than the attack ability itself．The minimum attack cost analysis considers the influence of similar attacks to compute the cost of each path for the first time，which conforms to the actual process of attack execution．The minimum environment change analysis can help people find out which attack path is most likely to be adopted by the attacker，which deals with IDS in a more reasonable way．These two analysis methods are helpful for improving the network configuration．The algorithm of attack graph generation and the method to analyze the attack graph proposed by the network security analysis model is more feasible than the existing ones． Key words network security；network security analysis；attack model；attack graph；attack ability 摘 要 网络脆弱性分析是近年来国内外研究的热点问题之一．基于攻击能力增长的网络安全性分析 模型以