Network security test generation method based on knowledge graph

Abstract

The invention belongs to the technical field of network security testing, and discloses a knowledge graph-based network security testing generation method, which comprises the following steps of: firstly, designing a mutual association ontology framework of a security testing field asset model, a vulnerability model and an attack technology model; secondly, extracting network security historical data, and constructing a network security test knowledge graph by using a graph database; and finally, generating a network security test based on the knowledge graph. According to the method, the penetration test in the security test can be represented by the attack model, attack activities, vulnerabilities, attack stages and the like are associated, historical attack test data can be fully utilized, a security test scheme can be generated through intelligent recommendation, and intelligent retrieval and automatic reasoning association of knowledge are realized. And the integrity and the high efficiency of the network security test are greatly improved.

Description

technical field [0001] The invention belongs to the technical field of network security testing, and in particular relates to a method for generating network security testing based on knowledge graphs. Background technique [0002] With the increasingly intensified game of network attack and defense confrontation, network attack methods and attack methods are characterized by diversity and complexity, network security threats are becoming more and more common and persistent, and it is becoming more and more convenient for attackers to obtain attack tools , leading to a significant reduction in the cost of network attacks, but the difficulty of detecting network attacks is increasing. Security testing mainly uses methods such as network asset identification, vulnerability scanning, and penetration testing to discover potential security risks in network assets in terms of confidentiality, integrity, and availability, and to take targeted preventive measures to prevent network ...

AI Technical Summary

Problems solved by technology

However, traditional security testing largely relies on personal experience and knowledge, and cannot be associated with other existing experience and knowledge.

Due to the limited knowledge utilized in this method, there will be problems such as incomplete testing, low efficiency, and the inability to realize automated intelligent construction.

At the same time, the traditional network security protection scheme is implemented by each organization independently with a vertical protection mechanism, which is becoming more and more inefficient in dealing with these complex network attacks. It is urgent to adopt new technical means to improve the overall network security protection capabilities

Images