Network attack destruction capability quantitative evaluation method and system

Abstract

The invention discloses a network attack destruction capability quantitative evaluation method and system, and the method comprises the steps: 1), for a to-be-evaluated target network attack, determining the attribute category of the attack according to the attribute related to the attack and a set network evaluation index system; wherein the network evaluation index system comprises an attack layer, an attribute layer, an atomic operation layer and an index layer; wherein the attack layer comprises a plurality of set network attacks; wherein the attribute layer comprises a plurality of attribute categories, each attribute category corresponds to a plurality of network attacks, and the network attacks of the same attribute category have the same network attack attribute; wherein the atomicoperation layer comprises a plurality of groups of atomic operations, and the network attack of each attribute category corresponds to one group of atomic operations; wherein the index layer comprises a plurality of indexes, and each index corresponds to one atomic operation; 2) determining an index of the attack according to the attribute category of the attack and the network evaluation index system, and collecting corresponding index data, and 3) evaluating the attack according to the index data of the attack.

Description

technical field [0001] The invention belongs to the technical field of computer network security, and further relates to a network attack damage capability evaluation method and system based on a four-layer architecture of "attack layer-attribute layer-atomic operation layer-indicator layer". The invention is mainly used to realize the assessment of the destructive ability of common network attacks, reveal the threat factors that destroy the stability of the network, and lay the foundation for the evaluation and measurement index system of the network environment. The invention can be applied to the destructive ability evaluation of common attacks, and also has positive significance for the awareness of offensive and defensive situations and the prediction of system security. Background technique [0002] In today's world, the Internet is very popular, but network crises happen from time to time. Crises such as network paralysis, computer virus invasion, and malicious softw...

AI Technical Summary

Problems solved by technology

The purpose of the present invention is to provide a quantitative evaluation method for network attack damage capability against common network attacks, which can solve the problem of measuring the damage degree of network attacks

Images