Automatic threat ensuring method facing to network security risk assessment based on first order logic predicate reasoning

Abstract

The invention discloses an automatic threat ensuring method facing to network security risk assessment based on first order logic predicate reasoning. The method uses a first order logic predicate descriptive language Datalog to formally describe network security state information and attack rule knowledge base information, uses a logic reasoning engine XSB to automatically reason, and analyzes the evidence files in a reasoning result to obtain threat information in a current network system; wherein, the threat information comprises a threat potential attack source, a corresponding loophole and a possible attack action. By adopting the logical reasoning engine, the automatic threat ensuring method can automatically and effectively ensure the attack threat in a large-scale network system, greatly reduce the working pressure of network administrators, and help the network administrators to purposely adopt preventive measures to protect the network system.

Description

technical field [0001] The present invention relates to the field of network security risk assessment, and more specifically refers to an automatic threat determination method based on first-order logic predicate reasoning for network security risk assessment. Background technique [0002] Risk assessment is the first process in the risk management methodology. Network security risk assessment is the process of determining the probability of occurrence of threats and their impact in the context of network attack and defense, based on attack and defense knowledge, on the basis of identifying and determining assets, threats, and vulnerabilities, and calculating the size of the risk in combination with existing security measures. A threat is a potential cause of an unexpected event that could cause damage to an asset or an organization, that is, the potential for a threat source or threat agent to successfully exploit a specific vulnerability to negatively impact an asset. Ide...

AI Technical Summary

Problems solved by technology

As the scale of the network system becomes larger and the topology of the network becomes more and more complex, it becomes increasingly difficult for network system administrators or risk assessment experts to manually find and determine the threats that exist in the network to meet actual needs.

Images