关键词: 网络安全, 安全性分析, 主机攻击图, 主机安全组, 风险评估

Abstract:

A simple, flexible, and efficient method is proposed to generate hostbased attack graph. Based on this generating algorithm, the concept of ‘host-security-group’ is put forward, and according with its partitioning algorithm, an approach of analyzing network security by using theory of host-security-group is described. It is proved to be intuitive, efficient and accurate, as it describes the overall security situation of network and facilitates network security administrator to identify the key hosts.

Key words: network security, security analysis, hostbased attack graph, host-security-group, risk assessment