Abstract:Network risk assessment should include the impact of the relationship between vulnerabilities, in order to conduct a more in-depth and comprehensive assessment of vulnerabilities and network-related risks. However, the impact of extracting the relationship between vulnerabilities mainly relies on manual processes, which are subjective and inefficient. To address these issues, this paper proposes a dual-layer knowledge representation model that combines various attributes and structural information of entities. This article first constructs a vulnerability knowledge graph and proposes a two-layer knowledge representation learning model based on it. Secondly, in order to more accurately assess the actual risk of vulnerabilities in specific networks, this paper proposes a vulnerability risk calculation model based on impact relationships, which realizes the risk assessment and ranking of vulnerabilities in specific network scenarios. Finally, based on the research on automatic prediction of the impact relationship between vulnerabilities, this paper proposes a new Bayesian attack graph network risk assessment model for inferring the possibility of device intrusion in the network. The experimental results show that the model proposed in this study outperforms traditional evaluation methods in relationship prediction tasks, demonstrating its efficiency and accuracy in complex network environments. This model achieves efficient resource utilization by simplifying training parameters and reducing the demand for computing resources. In addition, this method can quantitatively evaluate the success probability of attacking specific devices in the network topology, providing risk assessment and defense strategy support for network security managers.

Network Collaborative Defense Oriented Dynamic Risk Assessment System

Proactive Security Defense of Dynamic Network

Access Graph Based Risk Assessment Model for Network Information System

Network Dynamic Risk Assessment Based on the Threat Stream Analysis.

Overview Of Research On Assessment Model Of Radiant Threat Rank Based On Dynamic Bayesian Network

Network Security Risk Assessment Framework Based on Tactical Correlation

Modeling and Analysing of Air-defense Threat Netting

Extended Abstract: Access Graph Based Risk Analysis for Network Information System

Architecture-level particular risk modeling and analysis for a cyber-physical system with AADL

Hierarchical Risk Assessment Method for Network Security Based on Real-Time Warning

DS THEORY AND HIERARCHICAL WEIGHT BASED NETWORK SECURITY RISK ASSESSMENT

Vulnerability Assessment for Cyber Physical System of Distribution Network in Distributed Cooperative Control Mode

A New Method of Network Risk Assessment Based on Bayesian Model

The Vulnerability Relationship Prediction Research for Network Risk Assessment

Risk Assessment Method for Network Attack Surface Based on Bayesian Attack Graph

Risk Assessment Method for Security and Stability Control Services Against Cyber Attacks

Dynamic Security Risk Evaluation Via Hybrid Bayesian Risk Graph in Cyber-Physical Social Systems

Network Risk Assessment Method Based on Asset Correlation Graph

Security Risk Assessment and Risk-Oriented Defense Resource Allocation for Cyber-Physical Distribution Networks Against Coordinated Cyber Attacks

Dynamic Network Security Analysis Based on Bayesian Attack Graphs

Multi-dimensional Network Security Situation Assessment