Network fragility analyzing system based on privilege lift

Abstract

A network fragility analyzing system based on privilege lift in the technical field of network safety is used to analyze the potential safety hazard of network systems from the prospective of whole integrity, and comprises a hole checking module, an attack information knowledge base, a network attack picture generating module and an attack picture visualization module, wherein the hole checking module is connected with the network attack picture generating module and is used to transfer hole information, network communication information and host machine information, the attack information knowledge base is connected with the network attack picture generating module and is used to transfer hole utilization information, and the network attack picture generating module is connected with the attack picture visualization module and is used to transfer the network attack pictures of the whole information system. The system helps managers to recognize the influence of hole combination on system safety and to realize the safety condition of the whole system.

Description

technical field [0001] The invention relates to a system in the technical field of network security, in particular to a network vulnerability analysis system based on privilege promotion. Background technique [0002] With the continuous development of computer technology, the software running on it is becoming more and more complex, and the continuous enhancement of computer network technology also makes remote access more and more frequent, all of which make a large number of system vulnerabilities appear. The root of network security problems lies in the vulnerability of the network. Only by clearly understanding the vulnerability of the network itself can we allocate resources more reasonably, formulate strategies, and realize the protection of network security. The analysis of network vulnerability has become an important topic in the field of information security research. [0003] Through the search of domestic and foreign literature, Oleg Sheyner et al. introduced a...

AI Technical Summary

Problems solved by technology

[0004] Aiming at the above-mentioned deficiencies in the prior art, the present invention provides a network vulnerability analysis system based on privilege escalation, which is used to analyze the security risks of the network system from the perspective of the whole world, that is, to identify the same host in the information system through the generated attack graph Or the security problems caused by the combination of vulnerabilities between different hosts

Images