CAJ | 학술논문

为了有效的生成攻击图并且限制攻击图的规模，提出基于有序搜索的攻击图生成方法。该方法采用估价函数作为网络状态节点拓展的依据，估价函数值越小，优先进行扩展。利用该方法降低网络攻击图的规模，减少系统生成攻击图时耗费的资源，生成的攻击图能够用于评估网络的安全性，能够给网络管理员提供有价值的信息用于管理网络，预防入侵。
위료유효적생성공격도병차한제공격도적규모，제출기우유서수색적공격도생성방법。해방법채용고개함수작위망락상태절점탁전적의거，고개함수치월소，우선진행확전。이용해방법강저망락공격도적규모，감소계통생성공격도시모비적자원，생성적공격도능구용우평고망락적안전성，능구급망락관리원제공유개치적신식용우관리망락，예방입침。
In order to effectively generate the attack graph and limit the scale of the attack graph,a generation algorithm of network attack graph based on sequential search is presen-ted. This method extends network state nodes in according with the estimate function when generating attack graph,and the node with less estimate function value extends first. The method can reduce the scale of attack graph effectively and save the resource of computer to generate graph. We can assess the security of networks by the attack graph generated in this way,and provide valuable information for network administrator to manage networks and prevent attacks.