Survey of Attack Graph Analysis Methods from the Perspective of Data and Knowledge Processing. (26th December 2019)

• Record Type: Journal Article
• Authors: Zeng, Jianping; Wu, Shuang; Chen, Yanyu; Zeng, Rui; Wu, Chengrong
• Other Names: Caballero-Gil Pino Academic Editor.
• Is Part Of: Security and communication networks. Volume 2019(2019)
• Publication Date: 2019-12-26
• Subjects: Computer networks -- Security measures -- Periodicals; Computer security -- Periodicals; Cryptography -- Periodicals; 005.805
• DOI: 10.1155/2019/2031063
• Languages: English
• ISSNs: 1939-0114

Abstract

Abstract : Attack graph can simulate the possible paths used by attackers to invade the network. By using the attack graph, the administrator can evaluate the security of the network and analyze and predict the behavior of the attacker. Although there are many research studies on attack graph, there is no systematic survey for the related analysis methods. This paper firstly introduces the basic concepts, generation methods, and computing tasks of the attack graph, and then, several kinds of analysis methods of attack graph, namely, graph-based method, Bayesian network-based method, Markov model-based method, cost optimization method, and uncertainty analysis method, are described in detail. Finally, comparative study of the methods and future work are provided. We believe that this work would help the research community to understand the attack graph analysis method systematically.