摘要
网络化时代网络安全备受关注,对网络入侵路径的研究有助于指导网络安全防御。在对网络攻击图和吸收马尔科夫链分析的基础上构建了两者之间的映射关系,同时提出了一种新的非吸收节点指向自身的状态转移概率计算方法,得到了网络入侵路径分析模型。将搭建的网络入侵路径分析模型应用于网络环境中,结果表明,该模型可以有效地计算网络节点威胁度排序以及网络入侵长度期望值,这对网络安全管理员采取更为有效的安全防御措施具有一定的参考价值。
In the era of network,network security has attracted much attention.The research on network intrusion path is helpful to guide network security defense.Based on the analysis of network attack graph and Absorbing Markov chain,this paper constructs the mapping relationship between them,puts forward a new calculation method of state transition probability of non absorbing nodes pointing to themselves,and obtains the network intrusion path analysis model.The network intrusion path analysis model is applied to the network environment.The results show that the model can effectively calculate the threat ranking of network nodes and the expected length of network intrusion,which has a certain reference value for network security administrators to take more effective security defense measures.
作者
徐明伟
汤孝云
XU Ming-wei;TANG Xiao-yun(Hefei Binhu Vocational&Technical College,Hefei 230601,Anhui)
出处
《陇东学院学报》
2023年第2期44-49,共6页
Journal of Longdong University
基金
安徽省重点基金项目(2017jyxm0891)。
关键词
吸收马尔科夫链
网络攻击
状态转移概率
absorbing Markov chain
Network attack
state transition probability
