基于攻击检测和节点脆弱性的网络安全风险分析方法

摘要

随着网络技术的不断发展,被动防御已经渐渐不能满足需求,主动防御的需求越来越迫切.主动防御的基础是网络风险分析.本文提出一种基于攻击检测和节点脆弱性的网络风险分析方法.该方法利用攻击信息和节点脆弱性信息计算攻击造成的影响度,从而分析网络风险并确定网络系统的薄弱点.与基于节点脆弱性的网络风险分析方法相比较,本文方法模型更加完善,结果更加准确.%With the development of Internet,passive defense gradually can not satisfy the requirement,active defense is more and more important.The base of active defense is security risk analysis of network,to analyze the risk,a method based on attack detection and vulnerability is put forward.By calculating the influence with attack information and nodes' vulnerabilities,the risk of network can be determined and the leaks of the network system can be found.Compared with the method based on vulnerability,this method has a more perfect model and a more accurate result.