Approach of Goal-Oriented Attack Graph-Based Threat Evaluation for Network Security

For being not falling in as final targets of attackers,the critical resources in network environments should be protected. It is vital to quantify the threat and impact during the process of multi-stage attacks. Aiming at combine threat quantification of individual attack action and significance value of hosts,as well as large amount of attack dependencies in attack graphs,a methodology for threat evaluation was proposed. The bi-directional threat evaluation presented in this article is able to compute progress attackers already,as well as the threat to goal-resources in attack graph,which can be well applied to real-time attack threat evaluation. The proposed was finally verified in experiment and simulation.