作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程

• 安全技术 • 上一篇    下一篇

基于Rete算法的攻击图构建方法

樊子华,常朝稳,韩培胜,潘冬存   

  1. (信息工程大学 三院,郑州 450000)
  • 收稿日期:2017-02-09 出版日期:2018-03-15 发布日期:2018-03-15
  • 作者简介:樊子华(1993—),男,硕士研究生,主研方向为网络态势感知;常朝稳,教授;韩培胜,副教授;潘冬存,教授。

Generation Method of Attack Graph Based on Rete Algorithm

FAN Zihua,CHANG Chaowen,HAN Peisheng,PAN Dongcun   

  1. (The Third Academy,Information Engineering University,Zhengzhou 450000,China)
  • Received:2017-02-09 Online:2018-03-15 Published:2018-03-15

摘要: 针对现有攻击图构建方法适用的网络规模受限的问题,通过分析现有方法存在的缺陷及构建过程中的特点,使构建攻击图转化为威胁行动属性之间的模式匹配,将Rete引入到攻击图构建过程中,提出基于Rete的攻击图构建方法。实验结果表明,该方法具有较好的构建效率,能够适用于大规模网络的攻击图构建。

关键词: 网络安全, 攻击图, Rete算法, 大规模网络, 攻击图构建, 模式匹配

Abstract: Aiming at the problem that the applicable network scale for existing attack graph generation methods is limited,through analysis of the shortage of the existing attack graph construction methods and the characteristics of the construction process,the constructed attack graph is transformed into a pattern matching between the threat action properties.Rete is introduced into the construction process of attack graph,an attack graph building method based on Rete is proposed.Experimental results show that the method has better construction efficiency and can be applied to the construction of attack graph in large-scale network.

Key words: network security, attack graph, Rete algorithm, large-scale network, attack graph generation, pattern match

中图分类号: