Random Petri net-based network security risk analysis method

Abstract

The invention discloses a random Petri net-based network security risk analysis method, which comprises the following steps of: acquiring related attributes of a network topology structure and property; acquiring and saving threat information and frangibility information of the property; constructing a risk analysis model; simplifying the risk analysis model; acquiring user index information which is needed to be calculated; performing index quantitative analysis and calculation, and the like. The system risk associated analysis in a general information system environment is provided, the problems that the conventional security analysis tool is difficult to discover an unknown attack mode or security hole in the system, cannot perform global security analysis on the system and the like are solved, the comprehensive network risk analysis capacity is greatly improved, and the security of a network information system is effectively guaranteed.

Description

technical field [0001] The invention relates to a network security risk analysis method, in particular to a network security risk analysis method based on a random Petri net. Background technique [0002] With the overall acceleration of the process of national economy and social informatization, national economic and social development is increasingly dependent on basic information networks and important information systems. However, the more advanced the performance of network technology, the more complicated the issue of security and confidentiality; The higher the severity, the more prevalent the infohazard phenomenon will be. The flaws, vulnerabilities and threats of the network and information system itself make the operation of the information system objectively have potential risks, especially with the increasingly common network attacks and sabotage and the gradual diversification of attack tools, network threats You can see it almost everywhere. [0003] Informat...

AI Technical Summary

Problems solved by technology

The network vulnerability analysis system based on privilege escalation with the above structure can only analyze the vulnerabilities existing in the target network in isolation, and cannot comprehensively analyze the potential threats generated by the interaction of these vulnerabilities, ignoring the fact that the risks are related , cannot guarantee the security of the network, especially cannot be applied to large-scale networks

Images