攻击图算法在入侵防御系统中的应用

 针对目前及时发现网络漏洞,增强网络安全十分困难等问题,提出了基于攻击图的入侵防御方法.该方法通过生成全局网络攻击图算法来建立网络初始攻击图,并调用攻击图优化算法来去除全局攻击图中不合理路径,达到简化攻击图目的.最后,通过计算攻击图各状态节点损失度算法来为管理人员提供优化网络安全策略的依据.实验证明,这种入侵防御方法合理有效,并具有简单易行等优点.

Application of attack graphs algorithms in intrusion prevention system

Now it was found fnat network loopholes in time and enhanced network security was very difficult.Aimed at these problems,the paper provided a method of intrusion prevent based on attack graphs.This method built network initial attack graphs by creating global network attack graphs algorithm.And we called attack graphs optimization algorithm to remove unreasonable paths in global attack graphs,so the attack graphs was simplified.Finally,by the algorithm of calculating attack graphs state node’s loss degree,webmaster optimized the network security policy.Experiments proved that this intrusion prevent method was reasonable and effective,and had simple and easy to do etc.