摘要
论文从漏洞评估的原理、攻击路径及漏洞本身,提出一种基于攻击路径的漏洞风险评估模型。结合Markov与Poisson过程改进攻击路径的转换方式,形成基于其上的评估数学模型。
The paper begins with an analysis in vulnerability risk evaluation, including its theory, attack graph and specialty of vulnerability. Based on this analysis, an attack-graph based model of vulnerability risk evaluation is put forward. Through improving the switch pattern of attack path with Markov and Poisson process, author develops a mathematic model for the attack-graph.
出处
《信息安全与通信保密》
2007年第5期165-167,共3页
Information Security and Communications Privacy
基金
国家863计划(2005AA145110
2002AA145090)
