Abstract: The thesis presents a framework of network vulnerability analysis based on agents, which gather the vulnerability metric of each host. Then, through analyzing the changes of vulnerability met ric in various phases of network attacks, not only are the network vulnerability and the process of network attacks analyzed, but also the way for the prevenlion of network security for further research paved.

Key words: vulnerability;vulnerability metric;network attack