| 一种结构化的网络攻击建模方法 |
| |
| 引用本文： | 肖道举,马慧,陈晓苏.一种结构化的网络攻击建模方法[J].华中科技大学学报(自然科学版),2006,34(2):70-72. |
| |
| 作者姓名： | 肖道举 马慧 陈晓苏 |
| |
| 作者单位： | 华中科技大学,计算机科学与技术学院,湖北,武汉,430074 |
| |
| 摘 要： | 以传统的攻击树为研究对象,在对攻击节点进行重定义的基础上,将多阶段网络攻击与其所处的复杂网络环境相结合,给出了一种上下文敏感的结构化攻击建模方法,使之能够捕获网络漏洞和多阶段网络攻击的行为特征.实例分析表明,利用此方法构建的附带有多种评估参数的攻击树模型,能够有效地对系统进行脆弱性分析和攻击预警,具有较好的扩展性和实用性.
|
| 关 键 词： | 网络攻击 攻击树 攻击建模 脆弱性分析 |
| 文章编号： | 1671-4512(2006)02-0070-03 |
| 收稿时间： | 03 23 2005 12:00AM |
| 修稿时间： | 2005年3月23日 |
A structural approach to modeling network attacks |
| |
| Xiao Daoju,Ma Hui,Chen Xiaosu.A structural approach to modeling network attacks[J].JOURNAL OF HUAZHONG UNIVERSITY OF SCIENCE AND TECHNOLOGY.NATURE SCIENCE,2006,34(2):70-72. |
| |
| Authors: | Xiao Daoju Ma Hui Chen Xiaosu |
| |
| Abstract: | As a sort of tools for modeling network attacks,attack trees proposed a goal-oriented approach and possessed the characteristics of structurization and reusability.On the basis of redefining the attack node,multi-stage network attacks was combined with complex network environment and provided a context-sensitive attack model that can capture the structure of various network vulnerabilities and multi-stage attacks.The examples showed that the attack tree model with abundant parameters constructed by this method can aid in the analysis of vulnerabilities and future attacks on system and its prediction. It was characterized by good expansibility and practibility. |
| |
| Keywords: | network attacks attack tree attack modeling vulnerability analysis |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
