关键词: 攻击图, 路径冗余, 攻击距离权重, 攻击行为成本

Abstract: Aiming at the problem of inaccuracy of attack path prediction caused by incomplete node analysis in traditional attack graph, we proposed a prediction method of attack path based on attack graph attack behavior analysis. First, the traditional attack graph was optimized by the node attack distance weight, the possible attack path was decided, and the node attack behavior cost of the path was calculated. Then, the priority attack path was determined based on the estimation function. The experimental results show that the method can effectively eliminate the path redundancy of the attack graph and filter out reliable attack path, which improves the accuracy of the attack graph attack path prediction.

Key words: attack graph, path redundancy, attack distance weight, attack behavior cost