Research on Automatic Generation and Analysis Technology of Network Attack Graph
Wenhui Hu, Long Zhang, Xueyang Liu, Yu Huang, Minghui Zhang, Liang Xing · 2020
In view of the problem that the overall security of the network is difficult to evaluate quantitatively, we propose the edge authority attack graph model, which aims to make up for the traditional dependence attack graph to describe the relationship between vulnerability behaviors. This paper proposed a network security metrics based on probability, and proposes a network vulnerability algorithm based on vulnerability exploit probability and attack target asset value. Finally, a network security reinforcement algorithm with network vulnerability index as the optimization target is proposed based on this metric algorithm.