Abstract:Attack graphs play important roles in analyzing network security vulnerabilities, and previous works have provided meaningful conclusions on the generation and security measurement of attack graphs. However, it is still hard for us to understand attack graphs in a large network, and few suggestions have been proposed to prevent inside malicious attackers from attacking networks. To address these problems, we propose a novel approach to generate and describe attack graphs. Firstly, we construct a two-layer attack graph, where the upper layer is a hosts access graph and the lower layer is composed of some host-pair attack graphs. Compared with previous works, our attack graph has simpler structures, and reaches the best upper bound of computation cost in O(N2). Furthermore, we introduce the adjacency matrix to efficiently evaluate network security, with overall evaluation results presented by gray scale images vividly. Thirdly, by applying prospective damage and important weight factors on key hosts with crucial resources, we can create prioritized lists of potential threatening hosts and stepping stones, both of which can help network administrators to harden network security. Analysis on computation cost shows that the upper bound computation cost of our measurement methodology is O(N3), which could also be completed in real time. Finally, we give some examples to show how to put our methods in practice.

Simulation research on interdependence network attack principle

New attack strategies for complex networks

CORRELATION ANALYSIS OF ATTACK STRATEGIESAND ROBUSTNESS ANALYSIS ON THREE NETWORK MODELS

Robustness of Interdependent Networks under Several Intentional Attack Strategies

Network Security Risk Analysis Based on Simulation Attacks

The Dynamic Correlation Between Degree and Betweenness of Complex Network under Attack

Robustness Analysis of Interdependent Networks under Grey Information Attack

Resilience Evaluation of Complex Networks with Attack Intensity

Optimal Attack Strategy Based on Limited Cost Model on Complex Network

Identifying Vulnerable Nodes of Complex Networks in Cascading Failures Induced by Node-Based Attacks

Evaluation Method of Effect from Network Attack Considering Node Multi-Property Feature

Attack Research of Multilayer Network Vulnerability in the Urban Transport System

Adaptive neural network tracking and controlling network attack node in WSN

Research of Quantitative Vulnerability Assessment Based on Attack Graphs

A Quantitative Method for Evaluating Network Security Based on Attack Graph.

The resilience of interdependent transportation networks under targeted attack

Research on the Invulnerability of Regional Network Based on Topology Analysis

Reliability Analysis of Interdependent Hypergraph Network under Different Attack Strategies

Efficiency Evaluation of Communication Network＇s Nodes Attacks

Structural Vulnerability of Complex Networks under Multiple Edge-Based Attacks

Evaluating Network Security With Two-Layer Attack Graphs