基于漏洞关联攻击代价的攻击图生成算法

摘要

On the basis of existing attack graphs generation methods, this paper took the attack cost of vulnerability relations as a point of departure to design a basic framework of automatic generation of attack graph and proposed an algorithm of attack graph generation based on the attack cost of vulnerability relations. By combining the correlation between vulnerability, this algorithm made a scientific evaluation of attack cost by effectively eliminating excessive attack cost and attack path with little significance. It also simplified attack graph and examined the rationality and validity of algorithm through experiment.%在已有的网络攻击图生成方法的基础上,从漏洞关联的攻击代价出发,设计了一种攻击图生成基本框架,提出了一种基于漏洞关联攻击代价的网络攻击图的自动生成算法.该算法能有效结合漏洞之间的相关性,科学地评估攻击代价,有效删除了攻击代价过高、现实意义不大的攻击路径,简化了攻击图,并通过实验检验了该算法的合理性和有效性.