Virus attack defense method based on time probability attack graph

Abstract

The invention relates to a virus attack defense method based on a time probability attack graph. The method comprises the following steps: constructing a time probability attack model; obtaining potential attack paths according to the time probability attack graph, and calculating the maximum attack success probability of each attack path; calculating a defense income result of each attack path; and in combination with the maximum attack success probability of each attack path and the defense income result, analyzing and evaluating a network security situation, and deploying a defense system to regularly scan and detect attack behaviors. According to the virus attack defense method provided by the invention, the network security situation is analyzed and evaluated, so that the deployment position of the defense system can be deployed in a targeted manner according to the path and the node which need to be protected, and the deployment accuracy of the defense system is further improved.

Description

technical field [0001] The present disclosure relates to the technical field of computer network information security, in particular to a virus attack defense method based on a time probability attack graph. Background technique [0002] With the intensification of network offensive and defensive confrontation, Advanced Persistent Threat (APT) attacks targeting important enterprise-level networks such as important work departments and scientific research units are also gradually increasing. However, considering factors such as time, cost, and differences in control levels, it is difficult to patch all vulnerabilities or backdoors that may be exploited by the attacker to be foolproof. Reasonable qualitative and quantitative evaluation of network security performance can provide theoretical support for network risk management and control, provide reference for the deployment of defense technologies, and have important theoretical and practical significance for ensuring cybersp...

AI Technical Summary

Problems solved by technology

However, during the attack process, the exploitation of vulnerabilities is often not isolated. Under different networks and different attack modes, the order and difficulty of exploiting vulnerabilities are different, and the harm that the same vulnerability may cause is also different.

Images