Dissertation > Excellent graduate degree dissertation topics show

The Key Techniques of Attack Graph Generating for Large-scale Network

Author: ZhaoKai
Tutor: ZhangZuo
School: National University of Defense Science and Technology
Course: Computer Science and Technology
Keywords: Network vulnerability analysis Attack Graph Attack graph generation algorithm Parallel Host reachable relationship
CLC: TP393.08
Type: Master's thesis
Year: 2011
Downloads: 32
Quote: 0
Read: Download Dissertation

Abstract

The attack graph is a model-based network vulnerability assessment. The attack graph technology to the host network vulnerability associated with an in-depth analysis of the threat to network security attack path graph shows. The safety managers take advantage of the attack graph can be visually observed the relationship between the various vulnerability in the network, select a minimum price to compensate for network vulnerability. The Attack Figure technology mainly two aspects: the attack graph generation techniques and attack graph analysis techniques. Attack graph generation technology refers to the target network information and attack pattern generation method of attack graphs, the basis of the attack graph technology. Attack graph analysis techniques to the attack graph refers to the analysis of key node and path to quantify vulnerability. Existing attack graph generation technology mainly there are two problems: First, scalability issues. Due to the expansion of the network and the increased vulnerability of the existing attack graph generation algorithm complexity is high, it is difficult to adapt to the large-scale network, so the need to improve the scalability of the attack graph, making it suitable for large-scale network vulnerability analysis ; up to the relational model. The the reachable relationship between the host is a necessary condition of the formation of a single point of vulnerability in the network attack path, but also an important prerequisite for generating attack graphs existing attack graph generation technology, the relationship between the presence of up to is not comprehensive and does not automatically calculate such as inadequate, and therefore need to establish a comprehensive, moderate abstract, computable host up to the relational model, the host reachable relationship in this study on the basis of the calculation method. Address the problem of attack graph generated key technology research work: First, from the perspective of the TCP / IP protocol layering model, in-depth analysis of typical network attacks on network connectivity needs, on this basis, hierarchical host-based TCP / IP protocol stack up to the relational model, and designed to host up to relationship derivation algorithm. Algorithm to ACL rules and routing rules as all of the input and output target network the reachable relationship between the host relationship, as the attack graph generation algorithm necessary input conditions. Secondly, in order to improve the attack graph generation algorithm scalability, making it suitable for large-scale network, designed and implemented an attack graph generation algorithm in parallel. The main idea of ??the algorithm is: the first step in the process of the attack graph generation decomposed into multiple subtasks second step all sub-tasks are processed in parallel on multiple processors, each sub-task to generate a sub-attack graph, the third step is the use of data dependencies merge all the sub-attack graph, to build the final attack. Through theoretical analysis and experimental verification, to prove the attack graph generation algorithm is superior to existing algorithm in the time complexity. Finally, through experiments on attack graphs generated in parallel algorithms and a host of up relationship derivation algorithm for functional verification and performance analysis and experimental results show the validity and correctness of the algorithm, and the complexity of the algorithm and the theoretical analysis of complexity.

Related Dissertations

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer Network Security
© 2012 www.DissertationTopic.Net Mobile