Abstract:With the rapid development of the Internet, network attacks often occur, and network security is widely concerned. Searching for practical security risk assessment methods is a research hotspot in the field of network security. Network attack graph model is an active detection technology for the attack path. From the perspective of the attacker, it simulated the whole network attack scenario and then presented the dependency among the vulnerabilities in the target network in the way of directed graph. It is an effective tool for analyzing network vulnerability. This paper describes in detail the common methods and tools of network security assessment and analyzes the construction of theoretical model of attack graph, the optimization technology of attack graph, and the research status of qualitative and quantitative analysis technology of attack graph in network security assessment. The attack graph generated in the face of large-scale network is too complex to find the key vulnerability nodes accurately and quickly. Optimizing the attack graph and solving the key attack set can help the security manager better understand the security state of the nodes in the network system, so as to strengthen the security defense ability and guarantee the security of the network system. For all kinds of loop phenomena of directed attribute attack graph, the general method of eliminating loop is given to get an acyclic attack graph. On the basis of acyclic attack graph, an optimization algorithm based on path complexity is proposed, which takes atomic attack distance and atomic weight into consideration, and on the basis of simplified attack graph, minimum-cost security reinforcement is carried out for the network environment. Based on the ant colony algorithm, the adaptive updating principle of changing pheromone and the local searching strategy of the adaptive genetic algorithm are proposed to improve the ant colony algorithm. The experimental results show that compared with the ant colony algorithm, the improved ant colony algorithm can speed up the process of solving the optimal solution. When the number of attack paths is large, the advantages of the improved ant colony algorithm in solving accuracy and late search speed are more obvious, and it is more suitable for large-scale networks.

A Predictive Framework for Cyber Security Analytics using Attack Graphs

Predictive Cyber-security Analytics Framework: A non-homogenous Markov model for Security Quantification

Cybersecurity: A Stochastic Predictive Model to Determine Overall Network Security Risk Using Markovian Process

Attack Graph Analysis for Network Anti-Forensics.

Risk Assessment Graphs: Utilizing Attack Graphs for Risk Assessment

Model-based Cybersecurity Analysis: Past Work and Future Directions

Enhancing Cyber Security through Predictive Analytics: Real-Time Threat Detection and Response

Enhancing attack resilience of cyber-physical systems through state dependency graph models

Graph models for Cybersecurity -- A Survey

Attack Graph Model for Cyber-Physical Power Systems using Hybrid Deep Learning

Dynamic Network Security Analysis Based on Bayesian Attack Graphs

Research on Multi-Target Network Security Assessment with Attack Graph Expert System Model

A Bayesian-network-based cybersecurity adversarial risk analysis framework with numerical examples

Using attack graphs to defend healthcare systems from cyberattacks: a longitudinal empirical study

Applying Attack Graphs to Network Security Metric

An Adjacency Matrixes-Based Model for Network Security Analysis

Research on Automatic Generation and Analysis Technology of Network Attack Graph

Use of Graph Neural Networks in Aiding Defensive Cyber Operations

Graph-Theoretic Approach for Manufacturing Cybersecurity Risk Modeling and Assessment

Enhancing Cyber Supply Chain Security through Prophetic Analytics for Cyber Threats

A Relevance Model for Threat-Centric Ranking of Cybersecurity Vulnerabilities