A method and system for quantitative evaluation of network attack damage capability

Abstract

The present invention discloses a method and system for quantitative evaluation of network attack destructive capability. The method is as follows: 1) For a target network attack to be evaluated, determine the attribute of the attack according to the attributes involved in the attack and the set network evaluation index system category; the network evaluation index system includes attack layer, attribute layer, atomic operation layer and indicator layer; attack layer includes multiple set network attacks; attribute layer includes multiple attribute categories, each attribute category corresponds to several network attacks, and the same attribute Types of network attacks have the same network attack attributes; the atomic operation layer includes multiple sets of atomic operations, and each attribute type of network attack corresponds to a set of atomic operations; the indicator layer includes multiple indicators, each indicator corresponds to an atomic operation; 2) According to the attribute category of the attack and the network evaluation index system, determine the index of the attack, and collect the corresponding index data; 3) evaluate the attack according to the index data of the attack.

Description

technical field [0001] The invention belongs to the technical field of computer network security, and further relates to a network attack damage capability evaluation method and system based on a four-layer architecture of "attack layer-attribute layer-atomic operation layer-indicator layer". The invention is mainly used to realize the assessment of the destructive ability of common network attacks, reveal the threat factors that destroy the stability of the network, and lay the foundation for the evaluation and measurement index system of the network environment. The invention can be applied to the destructive ability evaluation of common attacks, and also has positive significance for the awareness of offensive and defensive situations and the prediction of system security. Background technique [0002] In today's world, the Internet is very popular, but network crises happen from time to time. Crises such as network paralysis, computer virus invasion, and malicious softw...

AI Technical Summary

Problems solved by technology

The purpose of the present invention is to provide a quantitative evaluation method for network attack damage capability against common network attacks, which can solve the problem of measuring the damage degree of network attacks

Images