Network attack path prediction method

Abstract

The invention provides a network attack path prediction method. Because network asset information is monitored in real time throughout the day through active scanning and passive scanning, the latest news of assets can be known in real time. According to the latest network asset information, the connection condition of each asset is identified, and an asset connection information and network asset topology map is drawn. Then, all possible paths of network attack are analyzed and judged, and the network administrator takes measures in advance to defend the network system and the core assets according to all the possible network attack paths predicted. Therefore, through the network attack path prediction method of the invention, network attacks can be prevented, the core data of enterprises can be protected from being invaded and stolen, and the cost of human maintenance can be reduced.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to a network attack path prediction method. Background technique [0002] With the rapid development of computer information technology, people's daily work and study are increasingly dependent on the Internet. However, recent network security incidents frequently broke out, which have seriously affected the information security of the entire society and individuals. The scope and content of network security threats continue to expand and evolve, and the network security situation and challenges are becoming increasingly severe and complex. In an open network environment, a large amount of information flows on the Internet, and an Internet computer intrusion event occurs every 20 seconds on average around the world. Therefore, in order to protect network security, devices such as firewalls and intrusion prevention systems have appeared on the market, but these...

AI Technical Summary

Problems solved by technology

Therefore, in order to protect network security, devices such as firewalls and intrusion prevention systems have appeared on the market, but these devices perform rule matching based on unique parameters in network data packets. If the data packets match the rule base, they will send an alarm It has a certain hysteresis and cannot detect upcoming and upcoming attacks. It is difficult to assist network security personnel to do a good job in advance protection.

For example: what risks exist in existing network assets, which assets will conduct network connection and data interaction, let alone predict the attack path in advance (which path hackers will use to attack) to assist network security personnel in advance protection, After the attack occurs, the attack path traceability is a comprehensive network asset risk positioning technology

Images