基于有序搜索的攻击图生成算法

为了有效的生成攻击图并且限制攻击图的规模,提出基于有序搜索的攻击图生成方法.该方法采用估价函数作为网络状态节点拓展的依据,估价函数值越小,优先进行扩展.利用该方法降低网络攻击图的规模,减少系统生成攻击图时耗费的资源,生成的攻击图能够用于评估网络的安全性,能够给网络管理员提供有价值的信息用于管理网络,预防入侵.

Generation Algorithm of Network Attack GraphBased on Sequential Search

In order to effectively generate the attack graph and limit the scale of the attack graph,a generation algorithm of network attack graph based on sequential search is presented. This method extends network state nodes in according with the estimate function when generating attack graph,and the node with less estimate function value extends first. The method can reduce the scale of attack graph effectively and save the resource of computer to generate graph. We can assess the security of networks by the attack graph generated in this way,and provide valuable information for network administrator to manage networks and prevent attacks.