Network Attack Forecast Algorithm for Multi-step Attack
Baoping Yan · Jisuanji gongcheng · 2011
The main form of network attack is multi-step attack.The current security equipments can only detect but not forecast.For this issue,this paper presents an approach based on attack utility to recognize the attacker's finally intention and forecast the next possible attack.It describes a multi-attack by the attack intent,and establishes the multi-attack logic diagram based on the attack intention.During the procedure of the attack forecast,attack utility is used to represent the attackers benefit for each attack step.The attack utility is an important reference for the multi-step attack forecast.Experimental results prove the validity of the algorithm.