CAJ | 학술논문

为了保护网络中关键信息资产, 评估分析网络的整体安全性, 提出了一种基于攻击图节点概率的网络安全度量方法。该方法改进了原子攻击节点自身概率的计算模型, 引入累积可达概率, 在此基础上, 研究了网络安全风险评估模型。实验结果表明, 所提评估方法能够准确地评估目标状态的安全级别和网络的整体风险。
위료보호망락중관건신식자산, 평고분석망락적정체안전성, 제출료일충기우공격도절점개솔적망락안전도량방법。해방법개진료원자공격절점자신개솔적계산모형, 인입루적가체개솔, 재차기출상, 연구료망락안전풍험평고모형。실험결과표명, 소제평고방법능구준학지평고목표상태적안전급별화망락적정체풍험。
To protect critical information resources in networked environment and evaluate the overall security of network, this paper paper proposed a approach to network security assessment based on probabilities of attack graph nodes. By improving individual probability's computational model of atomic attack and introducing cumulative reachable probability of nodes in the attack graph, it proposed the assessment model of network security risk. Experimental results show that the proposed approach can accurately assess the security level of target states and overall security risk of network.