Network attack path analysis method based on incidence matrixes

Abstract

The invention discloses a network attack path analysis method based on incidence matrixes, which is characterized in that potential attack paths in a network system are acquired by acquiring network topology information, threat information and vulnerability information of devices and interrelation between the threat and the vulnerability, and building incidence matrix models. The method provided by the invention is utilized to greatly improve comprehensive analysis capacity of network risks and effectively ensure safety of network information systems. The method is applied to large-scale network environments.

Description

Network Attack Path Analysis Method Based on Incidence Matrix technical field The invention relates to a network attack path analysis method, in particular to an association matrix-based network attack path analysis method. Background technique With the overall acceleration of the process of national economy and social informatization, national economic and social development is increasingly dependent on basic information networks and important information systems. However, the more advanced the performance of network technology, the more complicated the issue of security and confidentiality; The higher the severity, the more prevalent the infohazard phenomenon will be. The flaws, vulnerabilities and threats of the network and information system itself make the operation of the information system objectively have potential risks, especially with the increasingly common network attacks and sabotage and the gradual diversification of attack tools, network threats You can se...

AI Technical Summary

Problems solved by technology

The network vulnerability analysis system based on privilege escalation with the above structure can only analyze the vulnerabilities existing in the target network in isolation, and cannot comprehensively analyze the potential threats generated by the interaction of these vulnerabilities, and cannot guarantee the security of the network, especially cannot Applied to large-scale network

Images