摘要
提出一种基于攻击可行性分析的攻击路径生成方法,解决了攻击图中攻击路径存在路径冗余而导致的节点置信度计算不准确问题.通过对基于Bayes推理的似然加权算法进一步改进,能更准确地计算节点的置信度.实验结果表明,改进后的算法有效消除了攻击图中的冗余路径,从而提高了节点置信度的准确性,实现了对攻击路径的有效预测分析.
We proposed an attack path generation method based on attack feasibility analysis to solve the problem of attack path existing redundancy caused inaccurate calculation of nodes confidence in attack graph. By further improving likelihood weighting algorithm based on Bayesian inference, the algorithm could calculate the nodes confidence more accurately. Experimental results show that the improved algorithm effectively eliminates the redundant paths in the attack graph, thereby improving the accuracy of nodes confidence, and realizing the effective predictive analysis of the attack path.
作者
王辉
王哲
刘淑芬
WANG Hui WANG Zhe LIU Shufen(College of Computer Science and Technology, Henan Polytechnic University, Jiaozuo 454000, Henan Province, China College of Computer Science and Technology, Jilin University, Changchun 130012, China)
出处
《吉林大学学报（理学版）》
CAS
CSCD
北大核心
2017年第2期311-321,共11页
Journal of Jilin University:Science Edition
基金
国家自然科学基金(批准号:61472160)
国家科技支撑计划项目(批准号:2014BAH29F03)
关键词
信息安全技术
路径的有效预测
路径收益计算
攻击可行性
information security technology
effective prediction of path
path revenue calculation
feasibility of attack
