Multi-step Attack-oriented Assessment of Network Security Situation
Zhang Hengwei, Yang Haopu, Wang Jindong, Tao Li · International Journal of Security and Its Applications · 2017
In order to correctly analyze the multi-step attack and comprehensively assess the network security situation, a multistep attack-oriented assessing method of network security situation is proposed.The security events are clustered into different attack scenarios for identifying attackers.Based on the causal correlation between every attack scenario, the attack traces and attack phase can be distinguished.Finally, the quantitative criterion is established to realize the assessment of network security situation.Two network attack and defense experiments are used to verify the correctness and effectiveness, and the result shows the proposed method can truly depict the actual attack.