基于贝叶斯推理的攻击路径预测研究

针对攻击路径预测方法中存在的因路径冗余而导致的节点置信度错误计算问题，提出了攻击可行性概念，并改进了基于贝叶斯推理的似然加权法。通过对子攻击路径进行成本一收益分析，提出了基于攻击可行性的攻击路径生成算法，尽可能消除路径冗余；并在此基础上对似然加权法进行了改进，以支持上述算法，有效地避免计算节点置信度的错误计算。实验结果表明，该方法能有效地消除路径冗余，提高节点置信度的准确性，提升对攻击路径的有效预测。...

Full description

Saved in:
Bibliographic Details
Published in计算机应用研究 Vol. 32; no. 1; pp. 226 - 231
Main Author 王辉 王云峰 王坤福
Format Journal Article
LanguageChinese
Published 河南理工大学计算机科学与技术学院,河南焦作454000 2015
吉林大学电子科学与工程学院,长春130012%河南理工大学计算机科学与技术学院,河南焦作,454000
Subjects
似然加权
攻击可行性
攻击图
节点置信度
路径冗余
likelihood weighting
节点置信度
路径冗余
attack feasibility
attack graph
path redundancy
攻击图
似然加权
node belief
攻击可行性
Online AccessGet full text
ISSN1001-3695
DOI10.3969/j.issn.1001-3695.2015.01.052

Cover

More Information
Summary:针对攻击路径预测方法中存在的因路径冗余而导致的节点置信度错误计算问题，提出了攻击可行性概念，并改进了基于贝叶斯推理的似然加权法。通过对子攻击路径进行成本一收益分析，提出了基于攻击可行性的攻击路径生成算法，尽可能消除路径冗余；并在此基础上对似然加权法进行了改进，以支持上述算法，有效地避免计算节点置信度的错误计算。实验结果表明，该方法能有效地消除路径冗余，提高节点置信度的准确性，提升对攻击路径的有效预测。
Bibliography:Path redundancy in methods for predicting paths causes the problem that the computation of node belief is incor- rect. In order to solve it, this paper presented the concept of attack feasibility and improved the likelihood weighting algorithm based on the Bayesian inference. By analyzing cost-benefit on child attack paths, firstly it proposed an algorithm generating at- tack paths to eliminate path redundancy as far as possible; secondly, based c_n the above, it improved the likelihood weighting algorithm to support above algorithm so that it could effectively avoid the problem of incorrect computation and improve the ac- curacy of node belief. The finally experimental results show that the method can effectively eliminate the path redundancy and evidently improve the accuracy of node belief and consequently enhance the validity of prediction for attack paths.
51-1196/TP
attack graph; path redundancy; node belief; attack feasibility; likelihood weighting
WANG Hui, WANG Yun-feng, WANG Kun-fu （ 1. College of Comp
ISSN:1001-3695
DOI:10.3969/j.issn.1001-3695.2015.01.052