摘要：

网络攻击者总是希望更快地渗入网络内部，能够直接访问更加重要的主机，获得更高的主机访问权限。基于这一前提，分析各种网络攻击过程中的贪心策略，并建立相应的模型，应用这些贪心策略约束攻击图的生成过程。实验结果表明，生成的攻击图的规模明显减小，且没有丢失重要的网络攻击路径，同时改善了攻击图的可视化效果。

关键词: 贪心策略, 攻击图, 网络安全

Abstract:

Network attacker always wishes to penetrate into internal networks, direct access to more important host computers and get higher privilege on victim computers. Based on this assumption, some kinds of greedy policies are analyzed in network attack. The model is constructed and attack graph is limited under such greedy policy. Experimental results show that the attack graph is smaller in size and easier to understand than normal method without losing key attack paths.

Key words: greedy policy, attack graph, network security

中图分类号: 

• TP309.2