Research on network host risk assessment method based on environmental risk level attack graph

Abstract

In order to guarantee the information security of campus network, the risk assessment and calculation method of the attack graph model is improved by combining the university network security scenarios, integrating the node environment risk factors, proposing an attack probability calculation method based on CVSS atomic attack difficulty improvement, and generating the attack graph. By simulating the real server network environment, the Bayesian attack graph is constructed for the actual network to obtain the corresponding attack paths and attack probabilities. The attack graph generation model and attack probability calculation method proposed in this paper can improve the efficiency of university network security risk research and evaluation, and have good network security protection effect.