Abstract:

A simple, flexible, and efficient method is proposed to generate hostbased attack graph. Based on this generating algorithm, the concept of ‘host-security-group’ is put forward, and according with its partitioning algorithm, an approach of analyzing network security by using theory of host-security-group is described. It is proved to be intuitive, efficient and accurate, as it describes the overall security situation of network and facilitates network security administrator to identify the key hosts.

Key words: network security, security analysis, hostbased attack graph, host-security-group, risk assessment