Network attack graph generation method and device and electronic equipment

Abstract

The embodiment of the invention discloses a network attack graph generation method and device and electronic equipment, relates to the field of network information security, and can quickly generate anetwork attack graph. The network attack graph generation method comprises the steps of determining each associated asset node of a target asset in a target network environment; determining vulnerabilities existing in each associated asset node; determining whether there is a logical relationship between vulnerabilities of associated asset nodes with a direct network connection relationship; if so, performing logic association on the vulnerabilities with the logic relationship, and establishing a vulnerability logic relationship between the associated asset nodes; and establishing a network attack graph based on the target network environment and taking the target asset as an attack target according to the vulnerability logic relationship between the associated asset nodes. The device andthe electronic equipment comprise a module for executing the method. The method and device are suitable for generating the network attack graph.

Description

technical field [0001] The invention relates to the field of network information security, in particular to a method, device and electronic equipment for generating a network attack graph. Background technique [0002] With the widespread application of computer networks and the frequent occurrence of security incidents, network security has become an increasingly prominent problem. An effective way to solve network security problems is to evaluate and analyze network security. Most of the existing network asset vulnerability analysis methods traverse all assets in the network where the asset of interest is located, and then obtain the assets connected to the asset of interest, and then extract the assets from the acquired asset information. Assets that have vulnerability associations. [0003] Existing methods for generating attack graphs traverse the breadth of the tree structure of network asset nodes, covering some assets that are not connected to the asset of interest...

AI Technical Summary

Problems solved by technology

[0003] Existing methods for generating attack graphs traverse the breadth of the tree structure of network asset nodes, covering some assets that are not connected to the asset of interest, resulting in unnecessary calculation costs; and the premise of generating an attack graph is to perform a maximum Setting of attack depth and setting of maximum attack cost threshold

When the maximum attack depth is set too small, the result of the generated attack graph has certain omissions; when the maximum attack depth is set too large, it will cause unnecessary consumption of computing time and excessive overhead of storage resources in the process of generating the attack graph And there are problems such as computing node explosion

Images