基于精简状态空间的攻击图生成算法*

针对网络攻击图算法状态空间过大、攻击路径不明确等制约着攻击图在网络安全分析中应用的问题，提出了一种基于精简状态空间的改进算法。该算法以网络状态作为一个整体进行分析，动态生成网络中所有可达的网络状态，并枚举出所有攻击路径。由于明确界定了网络状态空间，使算法生成的状态空间得到控制。改进了攻击图表示方法，使得攻击路径清晰。通过实例分析证明了算法模型适合全面分析网络安全性和攻击者可能采取的行为方式。

Algorithm of attack graph generation based on simple status space

In order to solve the problems of oversize state space and ambiguous attack routes generating by algorithms of attack graph, put forward a type of improved algorithm based on simple state space. In the algorithm, regarded network state as a whole to analyze. The algorithm could dynamic generate all the reachable network states and the attack routes. The size of state space was controlled for the concept of state space was definitely confined. The expressive method was improved to make the attack routes clear. Through the analysis of an example, demonstrated algorithm model to be capable of comprehensive network security analysis and the potential attackers' behavior characteristic analysis.