Abstract:

Aiming at shortcomings that current network attack models can not be efficiently suitable for complicated network systems, a global network attack model based on the hierarchical expanded Stochastic Petri Net(SPN) is presented. The model can describe both macroscopic network attack and microcosmic host attack synthetically, and is very suitable for the cooperative attack simulation. It can solve efficiently the network states space explosion problem. Based on the model, the model generation algorithm is represented and potential attack relationships among hosts are dug for according to the definition of rough attack path. The Ant Colony Algorithm(ACA) is utilized to find k-critical vulnerable paths after expanding sub Petri net. By analyzing rough attack paths and accurate attack paths synthetically, a network risk evaluation method is proposed.

Key words: network attack model, Stochastic Petri Net(SPN), Rough Petri Net(RPN), Ant Colony Algorithm(ACA), network risk evaluation, attack path

摘要：

当前网络攻击模型对于复杂系统的建模能力较差。为此，提出一种基于层次扩展随机Petri网的全网攻击模型。该模型对宏观网络攻击和微观主机攻击具有较好的综合描述能力，适用于网络协同式组合攻击行为的模拟，并能够有效解决网络状态空间爆炸问题。基于该模型，提出一种生成算法，通过对网络粗糙攻击路径的定义，给出挖掘主机结点间潜在的攻击关系算法。经过子网扩展后，利用蚁群算法找出k条最优攻击路径，通过对粗糙攻击路径和精确攻击路径的综合评价，给出网络危险性定量评估方法。

关键词: 网络攻击模型, 随机Petri网, 粗糙Petri网, 蚁群算法, 网络危险性评估, 攻击路径

CLC Number: 

• TP393.08