An Efficient Study on Large and Complex Network Modeling

摘要

In order to support the automatic construction of an attack graph, a simple, flexible and complete network system model is necessary, which uses formal methods to describe network system resources and security elements. Since host reachability relations will be influenced by the filter device (router or firewall) in the network, making automatic construction difficult to obtain. Based on a detailed study of the relevant literature, a method of obtaining host reachability relations automatically is proposed. Based on the comprehensive analysis of network topology information and the configuration rules of the filter device, the proposed method first generates physical connection relations automatically; next, it combines the configuration rules of the filter device to obtain a set of host reachability relations. Experimental results indicate that this method exhibits high production efficiency and reduces consumption of system resources when constructing attack graphs, which can be used to evaluate the overall safety of large and complex network systems.