【作者】 刘艳芳； 丁帅； 李建欣； 张毅；

【Author】 Liu Yan-fang Ding Shuai Li Jian-xin Zhang Yi College of Computer Science and Engineering,Beihang University,Beijing,100191

【机构】 北京航空航天大学计算机学院；

【摘要】 攻击树描述了一个系统被攻击的所有不同的方法和攻击行为,为分析网络攻击过程提供了一个形式化和系统化的方法,它被广泛地应用于网络攻击仿真、网络攻击检测与防御以及网络安全评估。本文提出了一种基于攻击树的网络攻击路径生成方法。首先,给出一种易于遍历的攻击树的文法表示方法;然后在此基础上采用递归调用算法生成攻击树中的所有网络攻击路径;最后应用此方法设计实现了一个网络攻击仿真原型系统。实验表明,本文提出的网络攻击路径生成方法能够生成实现网络攻击目标的所有可能的网络攻击路径。更多还原

【Abstract】 Attack tree is widely used in network attacks modeling,because it provides a formal and systematical description for attack process,including all the different ways in which a system can be attacked,and all the attack steps of every way.Generating attack paths based on attack tree is further work of analyzing network attacks on attack tree.This paper proposes an approach of generating attack path based on attack tree.Firstly,this paper describes a method of representing attack tree in the form of grammar,which is an approach easy to traverse the tree structure from the leaves.And then this paper mainly describes an approach of generating attack paths based on the above representation of attack tree.Finally,we have implemented a network attack simulation system,and some preliminary experiments are conducted.The experimental results show the proposed approach can generate all the attack paths of attack tree.更多还原