Network Vulnerability Assessment Based on Attack Graph
Wang Huan, Jianping Zhao, Dan Liu, Li Bo · 2017 International Conference on Computer Systems, Electronics and Control (ICCSEC) · 2017
In order to identify the vulnerabilities and their relationships, a network vulnerability assessment model and method based on attack graph is proposed. The attack graph model is formally defined, and then the CVSS scaling of the vulnerability is introduced to quantify the attack overhead and return on the path. Based on the quantitative value and network connection relation, the generation algorithm of attack graph is given, and the process of generation, transfer, diffusion and aggregation of network risk is simulated. Compared with the traditional attack graph generation algorithm, the average speed is increased by 18%.