一种基于图论的网络安全分析方法研究.PDFVIP

30 2 JOURNAL OFNATIONAL UNIVERSITYOF DEFENSE TECHNOLOGY Vol.30 No.2 2008 :1001- 2486(2008) 02- 0097- 05 * 张维明, 毛捍东, 陈 锋 ( , 410073) : , NEG- NSAM, , , , , NEG- NSAM , : ; ; ; :TP393108 :A Study on Network Security Analysis Method Based on Graph ZHANG We-iming,MAO Han-dong,CHEN Feng (College of Informatio nSystem and Management, NationalUniv. of DefenseTechnology, Changsha 410073, China) Abstract:As informatio ntechnology security issues become more prominent, the network system security analysis is becoming increasingly important. The paper presents NEG-NSAM, a network security analysis method. Based o etwork parameters abstract and vulnerability correlatio nanalysis, the network exploitatio ngraph modelwas constructed, and the dynamicprocess of agradual infiltratio of themai nthreats to security objectives was characterized. For large-scale network environment, the simplified algorithm of network exploitatio ngraph model was proposed. Finally, the NEG-NSAM was used to exemplify the network and verify the feasibility and effectiveness of themethod. Key words: security analysis; network exploit; exploitatio ngraph; network parameter abstract , , [1] : Schneier , AND-OR , , , [2] [3] Dacier Ortalo , , , , [4] Swiler , , , [5- 6] (SMVPNuSMV) [7- 16] , , , , , , / 0, NEG- NSAM, , , * :2007- 08- 31 : :(1962) ), , , 98 2008 2 1 [12] (Exploi