Abstract:Network risk assessment should include the impact of the relationship between vulnerabilities, in order to conduct a more in-depth and comprehensive assessment of vulnerabilities and network-related risks. However, the impact of extracting the relationship between vulnerabilities mainly relies on manual processes, which are subjective and inefficient. To address these issues, this paper proposes a dual-layer knowledge representation model that combines various attributes and structural information of entities. This article first constructs a vulnerability knowledge graph and proposes a two-layer knowledge representation learning model based on it. Secondly, in order to more accurately assess the actual risk of vulnerabilities in specific networks, this paper proposes a vulnerability risk calculation model based on impact relationships, which realizes the risk assessment and ranking of vulnerabilities in specific network scenarios. Finally, based on the research on automatic prediction of the impact relationship between vulnerabilities, this paper proposes a new Bayesian attack graph network risk assessment model for inferring the possibility of device intrusion in the network. The experimental results show that the model proposed in this study outperforms traditional evaluation methods in relationship prediction tasks, demonstrating its efficiency and accuracy in complex network environments. This model achieves efficient resource utilization by simplifying training parameters and reducing the demand for computing resources. In addition, this method can quantitatively evaluate the success probability of attacking specific devices in the network topology, providing risk assessment and defense strategy support for network security managers.

A Risk Assessment Model Based On Petri Nets

Petri Nets Model of Emergency Control System for Shipping

Design Change Based on Network Flow Petri Net Model

Vulnerability Analysis of Clock Synchronization Protocol Using Stochastic Petri Net

Access Graph Based Risk Assessment Model for Network Information System

A New Method of Network Risk Assessment Based on Bayesian Model

A risk assessment model for enterprise network security

A markov game theory-based risk assessment model for network information system

Extended Abstract: Access Graph Based Risk Analysis for Network Information System

Application of Petri Net with Objects in Safety System Process Modeling

Network Attack and Defense Modeling and System Security Analysis: A Novel Approach Using Stochastic Evolutionary Game Petri Net

Modeling and security analysis of enterprise network using attack-defense stochastic game Petri nets

Reliability Modeling and Analysis of Reactor Protect System Based on Petri Net

The Research on Real-time Security Situation Assessment Technology Based on the Threat Propagation Model.

Dynamic Network Security Analysis Based on Bayesian Attack Graphs

Using Hidden Markov Models to Evaluate the Real-Time Risks of Network

The Vulnerability Relationship Prediction Research for Network Risk Assessment

Research on modeling method of power system network security risk assessment based on object-oriented Bayesian network

Network Security Risk Assessment Framework Based on Tactical Correlation

A Two-Dimension Security Assessing Model for CMDs Combined with Generalized Stochastic Petri Net

A General Real-Time Cyberattack Risk Assessment Method for Distribution Network Involving the Influence of Feeder Automation System