关键词: 攻击图, 网络安全加固, 启发式算法, 漏洞

Abstract: Concerning the problems of high complexity, single risk assessment criterion, costly network security hardening and difficultly applying to large scale network environment in previous algorithms, this paper proposes a heuristic attack graph analysis method for large scale network security hardening. The method assesses the risks of attack paths by combining path length and common vulnerability scoring system, limits search scope with a threshold, and reduces the time complexity of hardening strategy generation method by using heuristic algorithm. The experimental results show that the method has good scalability and is suitable for large scale networks, and significantly      reduces the cost of network security hardening with a reasonable running time.

Key words: attack graph, network security hardening, heuristic algorithm, vulnerability