Abstract:

The security dependency exists among the nodes in the network vulnerability exploitation graph.Three types of dependencies are calculated to obtain dependencies among nodes.The transition matrix of the dependencies among nodes is constructed.At last, the Hidden Markov Model (HMM) model is used and the risks in different exploitation levels are given.The experiments show that the method can be more accurate to express the actual vulnerability security risks.

Key words: node dependency；risk assessment；exploitation levels；Hidden Markov Model (HMM)