• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

J4 ›› 2008, Vol. 30 ›› Issue (10): 1-4.

• 论文 •    下一篇

一种基于原子功能的网络攻击效果评估指标体系

胡影[1,2] 郑康锋[1] 杨义先[1]   

  • 出版日期:2008-10-01 发布日期:2010-05-19

  • Online:2008-10-01 Published:2010-05-19

摘要:

针对现有评估攻击效果的指标比较抽象、不够全面的缺点,本文研究了怎样构建网络攻击效果评估指标体系,定义了原子功能代表网络攻击效果的基本元素;通过分析攻击库挖掘原子功能,提出基于面向对象的目标实体建模方法,分析了原子功能和目标对象的关系;最后提出了以原子功能为基础的“属性-原子功能-评估指标-采集指标”四层指标体系。该体系具有属性分类互斥、代表大部分典型网络攻击效果、更易于效果评估操作等特点。

关键词: 原子功能 属性 评估指标 采集指标

Abstract:

Aiming at the abstract indexes proposed by the existing schemes, the paper studies how to construct a metric system to evaluate network attack effects . By defining atomic functions as the basic elements of network attack effects, and mining the atomic functions in three attack libraries, we propose an object-oriented method to model attack targets, analyze the relations between atomic functions and attack targets, and present a 4-level metric system based on atomic functions, ineluding the"attribute-atomic function-evaluation index-collection index". The metric system can represent most typical ne  etwork attack effects and is conducive to evaluation.

Key words: atomic function, attribute, evaluation index, collection index