Attack path analysis method based on hierarchical attack graph

Abstract

The invention belongs to the technical field of network security, and discloses an attack path analysis method based on a hierarchical attack graph. Firstly, dividing an original network into a plurality of logic subnets through a community discovery algorithm, wherein the logic subnets and connection relations thereof form a network logic structure; generating two layers of attack graphs based onthe network logic structure and the network basic information; and finally, reducing an attack path on the two layers of attack graphs by utilizing monotonicity of attack behaviors. The method comprises the following specific steps: (1) realizing community discovery; (2) establishing a hierarchical attack graph model; (3) generating an attack path; (4) analyzing the attack path to provide a defense strategy. According to the attack path analysis method, unreasonable attack path generation is avoided from the perspective of attackers, the real-time performance of attack path analysis is effectively improved, and the problem that an existing attack path analysis method is poor in real-time performance when the network scale is large and the vulnerability is high is solved.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to an attack path analysis method based on a hierarchical attack graph. Background technique [0002] With the rapid development of the Internet and its applications, various network attack technologies emerge in an endless stream, network security problems are becoming increasingly serious, and traditional network security defense technologies are no longer sufficient to deal with them. Implementing active defense by analyzing the overall security status of the network system has become a research hotspot in the field of network security. Among them, the attack path analysis can discover the weak links of the network system and further provide security strategies for the network system, which has attracted extensive attention of researchers. [0003] Attack path analysis is an analysis method that can provide effective defense strategies for network systems. In network s...

AI Technical Summary

Problems solved by technology

[0014] The purpose of the present invention is to overcome the problem of poor real-time performance of attack path analysis in the prior art when the network scale is large, and to provide an attack path analysis method based on hierarchical attack graphs

Images