Method for generating network authority hoisting route based on data digging technology

Abstract

The invention relates to a method for generating network authority promoting paths based on the data mining technology in the technical field of network security. The method comprises: firstly, preprocessing network security loophole data, processing network security loophole information, and storing the network security loophole information into a database according to a set format; secondly, managing network connectivity data and using a network connectivity matrix to portray the network connectivity; thirdly, processing the network security loophole data and the network connectivity matrix and generating a utilizable frangible set; and fourthly, utilizing the data mining technology and self-connecting processing of the database to further generate network authority promoting path sets. The method is used for finding out all the potential authority promoting path sets in a network at a time, so as to better reinforce network security and realize network security management.

Description

technical field [0001] The invention relates to a method in the technical field of network security, in particular to a method for generating a network authority promotion path based on data mining technology. Background technique [0002] Existing network vulnerability analysis techniques often need to give the location of the attacker or the protected target, and then generate a network attack graph for analysis. In the existing network vulnerability analysis research, the existing generation methods of network privilege escalation are often studied based on the assumption of the attacker or the assumption of the protection target. Based on the method assumed by the attacker, the host and authority set where the attacker is assumed to be located are taken as method input, and the path, host and authority set that it can infiltrate are generated accordingly; the method based on the assumption of the protection target assumes the target host that needs to be protected Or a ...

AI Technical Summary

Problems solved by technology

However, this method still requires the assumption of the initial state of the attacker, so the generated attack graph is only a subset of the set of attack paths in the network

Images