Method for generating attack path and attack graph based on multiple dimensions

Abstract

The invention discloses a method for generating an attack path and an attack graph based on multiple dimensions, and belongs to the technical field of network security. According to the method, vulnerability entry samples are collected, a vulnerability knowledge base is established, and a front permission and a rear permission are marked for each vulnerability entry sample; features, including vulnerability description text features and CVSS index features, of each vulnerability entry sample in the vulnerability knowledge base are extracted; text preprocessing is performed on the vulnerabilitydescription text features; an attack mode is defined by using a triple < the prepositive authority, the postpositive authority and the vulnerability entry >; an attack mode knowledge base is constructed; for the target industrial control network, an attack graph is generated by adopting a breadth-first forward attack graph generation algorithm based on an attack graph optimization strategy. The multi-dimensional attack paths and the high-dimensional attack graphs corresponding to various attack modes are generated by analyzing the environment attributes of different terminals, the attack graph generation process is optimized, and the attack graph generation efficiency is improved.

Description

technical field [0001] The invention relates to the technical field of network security, and is a generation method based on multi-dimensional attack paths and attack graphs. Background technique [0002] The attack graph is a technology that predicts the way and process of an attacker launching an attack on a target network, guides the defender to take targeted defense measures against nodes in the network, and improves network security. The attack graph can be used to obtain potential security threats in the network, so that security managers can intuitively grasp the relationship between network risks. Security managers can choose the method with the least cost to monitor network security by analyzing all attack paths in the attack graph. maintain. [0003] Previous methods for attack path generation are often too large in scale, contain a lot of redundant information, have low generation efficiency, and cannot accurately analyze the key vulnerability factors in the atta...

AI Technical Summary

Problems solved by technology

[0003]Previous methods for attack path generation are often too large in scale, contain a lot of redundant information, have low generation efficiency and cannot accurately analyze key vulnerable factors in attack graphs

Images