Method for generating attack scenario in mobile cloud computing scene

Abstract

The invention discloses a method for generating an attack scenario in a mobile cloud computing scene, and relates to the field of network security. According to the method, firstly, a MulVAL tool is used for generating an attribute attack graph for the state of a target network, a CVSS is used for evaluating the utilization success rate of a single vulnerability, then a loop removal and redundant path algorithm is used for constructing a Bayesian network attack graph, and an improved node probability calculation algorithm is used for evaluating the cumulative success probability of each node of the attribute attack graph; and finally, an optimal attack path is generated by using a dynamic attack path generation algorithm, and then the attack path is described by using a network attack scenario description language to obtain an attack scenario script. According to the method, the process of obtaining the attack scenario in the mobile cloud computing scene is automated and dynamic, and the improved node probability calculation algorithm is used for processing the condition that a ring appears, so that the calculation of the accumulated success probability of each node on the attack graph is more vivid and accurate.

Description

technical field [0001] The present invention relates to a method for generating an attack graph in network security, and more particularly refers to a method for dynamically generating attribute attack scenarios for vulnerabilities in mobile cloud computing scenarios based on an improved Bayesian attack graph probability algorithm. Background technique [0002] As a typical representative of PCE (Personal Computing Environment, personal computing environment), mobile cloud computing has broad prospects in application fields such as cloud storage, cloud games and healthcare. The problem of mobile cloud computing security is particularly prominent. [0003] Network security drills are an important means of strengthening security awareness and training information assurance capabilities. Attack scenarios are assumptions and assumptions about the attack drill process, and their design and formulation are one of the key parts of organizing and implementing network security drills...

AI Technical Summary

Problems solved by technology

[0006] When generating attack scenarios in large-scale and complex mobile cloud computing scenarios, it is cumbersome and error-prone to manually analyze and design attack plans to write attack scenarios. There are problems in the method, such as: high learning cost due to the need to learn non-mainstream scripts or software, cannot be applied to large-scale networks due to the state explosion problem caused by the use of state attack graphs, cannot deal with redundant paths in attack graphs and ring problem, the present invention proposes a method for attack scenario generation in mobile cloud computing scenarios

Images