【摘要】 网络攻击效果评估技术,主要研究在目标网络环境下,如何对网络攻击的效果和能力进行评测。攻击效果评估模型的研究,需要对大量典型的攻击手段进行分析,提取出基本的网络攻击效果。本文采用NVD(National Vulner-ability Database)漏洞数据库挖掘网络攻击效果。首先对NVD数据库的数据进行预处理,去掉不相关的字段和不完整的数据,分解cvss_vector字段,提取攻击效果,转换成NAED(Network Attack Effects Database)数据库;然后在NAED数据库的基础上,进行攻击效果频度分析和关联分析,提取出具有典型性、发展性、明确性和独立性的攻击效果。更多还原

【Abstract】 Network attack effect evaluation,pays attention to how to evaluate effect and abilityof network attacks in the target environment. It is important to pick up essential attack effects based on analysis of most typical computer attacks for network attack effect evaluation model. The paper makes data mining for network attack effects based on National Vulnerability Database (NVD). Firstly,the NVD data are pretreated and converted to NAED(Network Attack Effect Database),including deleting irrelated vulnerability attributes and imperfect data,decomposing ‘cvss_vector’,and building attack effects. Then,the paper analyzes frequency and correlation of these attack effects,and gains representative,developing,definite and independent network attack effects.更多还原