Research of quantitative network security assessment based on Bayesian-attack graphs
Jingzhi Li · Jisuanji yingyong yanjiu · 2013
Aiming at solving the problems of attack graphs that the complicated relationships between nodes,the existing of cyclic attack paths and reflecting merely the static risk when evaluating the network security,this paper put forward the concept of Bayesian-attack graphs which simplified attack graphs and avoided the appearing of the cyclic paths by an optimized algorithm,combining attack graphs and Bayesian theory.By importing attack evidence and CVSS,this paper proposed a new method against to the vulnerability which could dynamically evaluate the whole and partial network security based on Bayesian-attack graphs.Experimental results in the real network show its veracity and validity,and the method can dynamically reflect the changes of the network security situation comparing to traditional assessment methods.