A Simplified Model for Attack Paths Construction in Multiple Hosts

摘要

Vulnerabilities do enormous harm to personal computers. What is worse, with emergence of much more applications of computer networks nowadays, network security caused by vulnerabilities has become an important issue. And attacks turned more proficient, making it much more difficult to protect our computer networks. In view of the security issue of complex network, effective identification of attack paths contributes to network security defense a lot. In order to obtain the paths, attack graphs are used. And to construct it requires preconditions like vulnerabilities information, network configuration, and etc. In this paper, we present a simplified model to construct the attack paths. We discuss the construction of attack paths taking advantage of logic programming and corresponding preconditions generated by the logic rule and facts.