网络攻击节点路径高效检测模型仿真研究

摘要

This research focuses on the detection model of node path of network attack based on attack graph.Our research defined network attack graph according to theory of attack graph to detect authority state of attacker at present moment,then acquired connection matrix of network and obtained formal description of loophole,attack effect and attack premise used by attacker.Moreover,the research detected the probability of network loophole used by intruder,acquisition authority of attacker and invasion intention to acquire maximum likelihood of invasion under each attack path of network.Thus,we built the detection model according to detection results.Experimental results show that the model has high design precision and can improve analysis efficiency of network security effectively.%网络攻击节点路径的高效检测,可以有效的提高网络的安全系数.对网络攻击节点路径的检测,需要通过计算入侵意图被实现的概率,获取入侵的最大可能性,完成对网络攻击的检测.传统方法描述不同攻击类型存在的关联性,获取引起网络系统状态变迁的渗透序列,但无法对入侵的可能性进行估计,导致检测精度低.提出基于攻击图的网络攻击节点路径检测模型.根据攻击图理论定义网络攻击图,检测出当前时刻攻击者的权限状态,获取网络的连接矩阵,得到攻击者所利用漏洞、攻击效果、攻击前提的形式化描述,检测网络漏洞被入侵者成功利用的概率、入侵者获取权限的概率和其入侵意图被实现的概率,获取在网络各个攻击路径下其入侵的最大可能性,以检测的结果为依据组建网络攻击节点路径检测模型.实验结果表明,所提模型设计精确度高,有效地提高了网络安全分析效率.