A Network Vulnerability Assessment Method Using General Attack Tree
Bo Huang, Yang Liu · 2022 5th International Conference on Data Science and Information Technology (DSIT) · 2022
Vulnerability assessment is an important strategy to enhance the security of network/system assets. In order to realize the accuracy and usability, a feasible framework of vulnerability assessment with quantized elements is required. Therefore, a general network attack tree model is proposed. The attack path can be traced by following the most possible leaf node and branch node of the tree. Due to the consideration of visualization, computability and simulating hacker's thought, a fuzzy mathematics approach is brought into the model for the quantization of the elements in each attack step. Using this framework, the vulnerability can be located conveniently, and the attack path and behavior can be dug out.