Attack path prediction method, device, equipment, storage medium and program product

Abstract

The application discloses a prediction method and device of an attack path, equipment, a storage medium and a program product, and relates to the technical field of network security. The method is applied to a topology network, the topology network comprises a plurality of nodes, and the method comprises the following steps: acquiring a historical threat score graph of the topology network, wherein the historical threat score graph comprises a historical optimal threat path from a starting node to a target node and a historical optimal threat score; in the case that a new node is added to the topology network or a path is changed, acquiring at least one attack path in the topology network, which starts from the starting node and is related to the new node or the changed path; calculating a target path threat score in the at least one attack path; and predicting an optimal attack path of the topology network according to the target path threat score and the historical optimal threat score. According to the embodiment of the application, the calculation resources can be saved, and the prediction efficiency of the attack path is improved.

Images