基于权限提升矩阵的攻击图生成方法

目前的攻击图生成算法的复杂度较高，难以应用于大规模网络环境的攻击图生成.本文对攻击图构建过程进行了研究，在攻击模式库和目标环境描述模型的基础上，提出了基于权限提升矩阵的攻击图生成方法，以矩阵描述攻击过程中攻击者的权限提升过程，能够以较低的算法复杂度生成攻击图.搭建实验网络，验证了本文算法的攻击图生成过程. 

Attack Graph Generation Method Based on Privilege Escalation Matrix

Attack graph is a visual display of the attack paths. It can reveal the relation of the vulnerabilities and damage may be caused. Attack graph provides a more intuitive and in-depth analysis method for risk assessment and penetration test. The complexity of current attack graph generation algorithms is too high to apply to large-scale network environments. In this paper, studying the process of constructing attack graph, an attack graph generation method was proposed based on privilege escalation matrix, attack pattern bank and describing target model. With the use of matrixes to describe the process of privilege escalation, the complexity of attack graph generation algorithms was lowered greatly. Finally, an experimental network was built as a case to illustrate the attack graph generation process.