Network Attack and Defense Effectiveness Evaluation Based on Dematel Method

Abstract

Taking the strategy combination of attack and defense as the basic parameter, Dematel method (decision test and experiment evaluation method) is introduced to analyze the causal relationship between attack strategies and defense strategies by constructing the matrix of “expertise”. The method is used to calculate the effect of attack and defense strategies, compare the direct and indirect impact towards to target network system, thus achieve the purpose of assessing the overall impact of the offensive and defensive strategies on the target network system. Aiming at the attack and defense game theory based on Web service of a target network system, the attacker has four attack strategies: such as malicious code attack, denial of service attack. Defender has three defensive strategies: such as Web services security strategy defense, code reconstruction defense. The experimental results showed network defense in the network offensive and defensive system is the recipient of influence rather than those who are always in a passive position, cyber attacks are those who influence. Denial-of-service attacks are mainly those who affect the impact of the ability to resist other effects strong, the result is very important to study Web services-based network offensive and defensive game theory.