面向大规模网络安全加固的攻击图分析方法-计算机科学与探索.PDF

ISSN 1673-9418 CODEN JKYTA8 E-mail: fcst@vip. 163.com Journal of Frontiers of Computer Science and Technology 1673-9418/2018/ 12(02)-0263-11 Tel: +86-10 doi: 10.3778/j.issn. 1673-9418.1702013 面向大规模网络安全加固的攻击图分析方法* 1 1+ 2 1 2 赵 超 ，王慧强 ，林俊宇 ，吕宏武 ，韩冀中 1. 哈尔滨工程大学 计算机科学与技术学院，哈尔滨 150001 2. 中国科学院 信息工程研究所，北京 100000 Attack Graph Analysis Method for Large Scale Network Security Hardening 1 1+ 2 1 2 ZHAO Chao , WANG Huiqiang , LIN Junyu , LV Hongwu , HAN Jizhong 1. College of Computer Science and Technology, Harbin Engineering University, Harbin 150001, China 2. Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100000, China + Corresponding author: E-mail: wanghuiqiang@ ZHAO Chao, WANG Huiqiang, LIN Junyu, et al. Attack graph analysis method for large scale network secu- rity hardening. Journal of Frontiers of Computer Science and Technology, 2018, 12(2) ：263-273. Abstract: Concerning the problems of high complexity, single risk assessment criterion, costly network security hardening and difficultly applying to large scale network environment in previous algorithms, this paper proposes a heuristic attack graph analysis method for large scale network security hardening. The method assesses the risks of 索 attack paths by combining path length and common vulnerability scoring system, limits search scope with a threshold, 探 and reduces the time complexity of hardening strategy generation method by using heuristic algorithm. The experi- m