A New Model for Securing Networks Based on Attack Graph
Chengyi Cai, Yiheng Zhang, Zhiping Wang, Chongxiang Xue · 2019
As information security has become an increasingly significant issue, it is urgent to take some methods to prevent illegal network attacks. In this paper, a new model for securing network based on attack graph is proposed. Considering both views of attackers and network security engineers, our model contains attack prediction and network fixing strategies. By generating attack graph, our model is developed based on shortest path method and minimal cut theorem, and it can be adopted to figure out possible attacks, unguarded permissions and vulnerabilities to be fixed in the network. Through simulation tests and comparisons, our model is demonstrated to possess certain reliability and suit small-scale networks.