Network Security Analysis Model Based on Logic Exploitation Graph
Zhang Wei-ming · Jisuanji gongcheng · 2009
Recent work in network security focuses on the fact that combinations of exploits are the typical means by which an attacker breaks into a network.This paper describes a new approach to represent and analyze network vulnerability.It proposes logic exploitation graph,which directly illustrates logical dependencies among exploitation goals and network configure.The logic exploitation graph generation tool builds upon LEG-NSA,a network security analyzer based on prolog logic programming,and demonstrates how to reason all exploitation paths using bottom-up and top-down evaluation algorithms in the prolog logic-programming engine.Experimental evidence show that the logic exploitation graph generation algorithm is very efficient.