一种高效的攻击树串行建模方法

An Original Effective Method for Modeling the Attack Tree

  • 摘要: 为克服传统并行结构攻击树效率低、实用性差等问题,通过引入攻击序列,提出一种具有普适性的串行攻击树模型及其构建方法,并对每个叶子节点定义了其权重,从而对攻击单元效能进行量化分析;再利用Dijkstra算法计算攻击树模型中的最优路径,给出最佳攻击策略. 通过对具有20个叶子节点的攻击树模型进行建模和分析,结果表明,新模型比传统并行模型具有更大的收益,攻击复杂度比传统模型降低65%.

     

    Abstract: To conquer the disadvantages of low efficiency and the poor practicability of the traditional attack tree, a universal serial attack model and its constructing method were proposed by introducing an order of the atomic attacks. The weights of each tree leave were defined and the effectiveness of the elementary attacks could be quantified. Further, the Dijkstra algorithm was used to calculate the optimal route of the serial attack model, which would offer an optimal attack strategy. Finally, a complex attack tree with twenty leaves was built and analyzed by using the above method. The results indicate that, in comparison with the traditional parallel model, the proposed serial attack tree model with weight concept has the advantages of bigger outcome, lower algorithm complexity, higher efficiency and more perfect effectiveness.

     

/

返回文章
返回
Baidu
map