Research on establishing network intrusion modeling based on MLL-AT
Hao Huang · Journal of Communications · 2011
The method of modeling attack using attack tree was researched.The main research goal was how to effectively use the attack tree model and denote the multi-stage network attacks.Traditional attack tree was expanded and improved.Nodes of attack tree were redefined,and attack risk of leaf node was quantified.Then the mentality and method for estab-lishing MLL-AT(multi-level layer attack tree) were proposed.Based on the given attack tree,the MLL-ATDL(mul-ti-level layer attack tree description language) attack description language was given.The improved attack tree can model the attacks more accurately,in particular the multi-stage network attacks.And it can also be used for appraising system risk,distinguishing the different degrees of system security threats caused by different attack sequences.