Network Vulnerability Assessment Based on Attack Graph

In order to identify the vulnerabilities and their relationships, a network vulnerability assessment model and method based on attack graph is proposed. The attack graph model is formally defined, and then the CVSS scaling of the vulnerability is introduced to quantify the attack overhead and return on the path. Based on the quantitative value and network connection relation, the generation algorithm of attack graph is given, and the process of generation, transfer, diffusion and aggregation of network risk is simulated. Compared with the traditional attack graph generation algorithm, the average speed is increased by 18%.