一种基于智能规划的攻击图快速构建方法

攻击图可以分析企业网络中各个脆弱点之间的相互作用关系以及由此产生的潜在威胁.把攻击图的自动构建问题转化为特殊的智能规划问题,并利用智能规划问题标准描述语言PDDL进行描述;选取并修改了bifrost规划器来自动构建攻击图,分析了它不能适用于大规模网络的原因.进一步基于攻击者能力的单调性假设设计了一种新型且高效的单调规划器来快速地构建攻击图.模拟实验显示,对1 100台主机的网络构建攻击图的时间低于10 min,验证了该方法可以应用于实际的大规模企业网.

AI planning-based approach of attack graph generation

A ttack g raphs can rev eal the vulnerabilit ies and threats in enter prise netw o rk. The mo del forgenerat ing at tack graphs w as described in PDDL ( planning domain def init io n language) , and a novel plannerw as pr opo sed to generate at tack graphs. Furthermor e, based on the mo noto nicity hypothesis, a newplanner w as designed. In the simulating test , the generat ion of at tack graphs cost less than 10 minutes.The r esult s prove that it can be w idely used in large scale enterprise netwo rk.