The Research On Automated Generation of Attack Graph Based On Attack Mode
Yi Wang · Computers & Security · 2008
The network vulnerability analysis based on attack graph is an important method of strengthening network security. Nevertheless, when analyzing a large scale network, how to improve the efficiency of the attack-graph generation is a hot issue nowadays. Based on the vulnerability analysis model, an automatic method for generating attack graph is proposed in this paper, which starts with the research on attacker’s behavior. It defines the attack mode and corresponding prolog rules, automatically generate atomic attack and attack graph, which greatly improves the efficiency of network vulnerability analysis.