Abstract:Network risk assessment should include the impact of the relationship between vulnerabilities, in order to conduct a more in-depth and comprehensive assessment of vulnerabilities and network-related risks. However, the impact of extracting the relationship between vulnerabilities mainly relies on manual processes, which are subjective and inefficient. To address these issues, this paper proposes a dual-layer knowledge representation model that combines various attributes and structural information of entities. This article first constructs a vulnerability knowledge graph and proposes a two-layer knowledge representation learning model based on it. Secondly, in order to more accurately assess the actual risk of vulnerabilities in specific networks, this paper proposes a vulnerability risk calculation model based on impact relationships, which realizes the risk assessment and ranking of vulnerabilities in specific network scenarios. Finally, based on the research on automatic prediction of the impact relationship between vulnerabilities, this paper proposes a new Bayesian attack graph network risk assessment model for inferring the possibility of device intrusion in the network. The experimental results show that the model proposed in this study outperforms traditional evaluation methods in relationship prediction tasks, demonstrating its efficiency and accuracy in complex network environments. This model achieves efficient resource utilization by simplifying training parameters and reducing the demand for computing resources. In addition, this method can quantitatively evaluate the success probability of attacking specific devices in the network topology, providing risk assessment and defense strategy support for network security managers.

Fuzzy Evaluation Of Network Vulnerability

OPTIMIZED FUZZY PLANNING OF DISTRIBUTION POWER NETWORKS Part One: Model and Methodology

A novel approach to network vulnerabilities quantitative evaluation based on Mamdani-Style fuzzy logic

VOLTAGE VULNERABILITY ASSESSMENT BASED ON RISK THEORY AND FUZZY REASONING

Assessing Physical Network Vulnerability under Random Line-Segment Failure Model

Topological Vulnerability Evaluation Model Based on Fractal Dimension of Complex Networks.

Research on Network Security Situation Assessment Technology Based on Fuzzy Evaluation Method

Analyzing vulnerability of optical fiber network considering recoverability

Network Vulnerability Assessment Based on Knowledge Graph

The Vulnerability Relationship Prediction Research for Network Risk Assessment

Vulnerability analysis dased on a fuzzy input testing

Research on Complex Characteristics and Vulnerability of Power Communication Network.

Evaluation of Complex Network Model Based on Cloud Model

A Quantitative Method for Evaluating Network Security Based on Attack Graph.

Attack Vulnerability of Network Controllability.

Research of Network Vulnerability Analysis Based on Attack Capability Transfer

Vulnerability Analysis for Complex Networks Using Aggressive Abstraction

RISK ASSESSMENT OF COMPLEX ENGINEERING PROJECT BASED ON FUZZY PETRI NET UNDER THE PERSPECTIVE OF VULNERABILITY

An Approach for Modeling Vulnerability of the Network of Networks

Extended Abstract: Access Graph Based Risk Analysis for Network Information System

A quantitative framework for network resilience evaluation using Dynamic Bayesian Network