Formulization of network attack pattern based on improved attack tree

As a mean for describing network attack pattern and modeling,attack tree is characterized by structure and reutilization.The disadvantages of the attack tree in application were analyzed.A new establishment rule for the attack tree was presented by introducing time-order and probability.It can increase the exactness of the methodology.The improved attack tree was used to describe WEB attack.The results show that the methodology is effective.