Abstract:With the rapid development of the Internet, network attacks often occur, and network security is widely concerned. Searching for practical security risk assessment methods is a research hotspot in the field of network security. Network attack graph model is an active detection technology for the attack path. From the perspective of the attacker, it simulated the whole network attack scenario and then presented the dependency among the vulnerabilities in the target network in the way of directed graph. It is an effective tool for analyzing network vulnerability. This paper describes in detail the common methods and tools of network security assessment and analyzes the construction of theoretical model of attack graph, the optimization technology of attack graph, and the research status of qualitative and quantitative analysis technology of attack graph in network security assessment. The attack graph generated in the face of large-scale network is too complex to find the key vulnerability nodes accurately and quickly. Optimizing the attack graph and solving the key attack set can help the security manager better understand the security state of the nodes in the network system, so as to strengthen the security defense ability and guarantee the security of the network system. For all kinds of loop phenomena of directed attribute attack graph, the general method of eliminating loop is given to get an acyclic attack graph. On the basis of acyclic attack graph, an optimization algorithm based on path complexity is proposed, which takes atomic attack distance and atomic weight into consideration, and on the basis of simplified attack graph, minimum-cost security reinforcement is carried out for the network environment. Based on the ant colony algorithm, the adaptive updating principle of changing pheromone and the local searching strategy of the adaptive genetic algorithm are proposed to improve the ant colony algorithm. The experimental results show that compared with the ant colony algorithm, the improved ant colony algorithm can speed up the process of solving the optimal solution. When the number of attack paths is large, the advantages of the improved ant colony algorithm in solving accuracy and late search speed are more obvious, and it is more suitable for large-scale networks.

Employees’ Social Graph Analysis: A Model of Detection the Most Criticality Trajectories of the Social Engineering Attack’s Spread

Detection and Amelioration of Social Engineering Vulnerability in Contingency Table Data using an Orthogonalised Log-linear Analysis

Quantitative assessment of social engineering threat in social network

Dynamical System approach to insider threat detection

Mining user interaction patterns in the darkweb to predict enterprise cyber incidents

Predicting enterprise cyber incidents using social network analysis on the darkweb hacker forums

Towards a Security Lifecycle Model against Social Engineering Attacks: SLM-SEA

An approach to internal threats detection based on sentiment analysis and network analysis

Detecting cyber threats through social network analysis: short survey

Attacking Strategies and Temporal Analysis Involving Facebook Discussion Groups

MODELING THE PROTECTION OF PERSONAL DATA FROM TRUST AND THE AMOUNT OF INFORMATION ON SOCIAL NETWORKS

Statistical Techniques for Detecting Cyberattacks on Computer Networks Based on an Analysis of Abnormal Traffic Behavior

Attack Graph Model for Cyber-Physical Power Systems using Hybrid Deep Learning

Social engineering in cybersecurity: a domain ontology and knowledge graph application examples

Research on Multi-Target Network Security Assessment with Attack Graph Expert System Model

Modeling Social Engineering Botnet Dynamics Across Multiple Social Networks

Detection and prediction of anomalous behaviors of enterprise's employees based on data-mining and optimization algorithm

Complex Network Security Analysis Based on Attack Graph Model

DEVELOPING GAME THEORY-BASED METHODS FOR MODELING INFORMATION CONFRONTATION IN SOCIAL NETWORKS

Security Analysis on Social Media Networks via STRIDE Model

Understanding and Deciphering of Social Engineering Attack Scenarios.