中圖分類號： TP309.2 文獻標識碼： A DOI：10.16157/j.issn.0258-7998.200192 中文引用格式： 潘剛，米士超，郭榮華，等. 基于攻擊樹和CVSS的網(wǎng)絡(luò)攻擊效果評估方法[J].電子技術(shù)應(yīng)用，2022，48(4)：76-80. 英文引用格式： Pan Gang，Mi Shichao，Guo Ronghua，et al. Evaluation method of network attack effect based on attack tree and CVSS[J]. Application of Electronic Technique，2022，48(4)：76-80.
Evaluation method of network attack effect based on attack tree and CVSS
Pan Gang，Mi Shichao，Guo Ronghua，Huang Ligang，Wang Jinsuo，Li Kai
Key Laboratory of Optoelectronic Countermeasures Measurement and Evaluation Technology，Luoyang 471003，China
Abstract： In order to solve the over-dependence on index data in network attack effect evaluation and improve the accuracy of network attack effect evaluation, this paper proposed a network attack effect evaluation method based on attack tree and CVSS. Firstly, The attack tree model is used to describe the possible attack paths of the system, and the probability of each leaf node is solved by fuzzy analytic hierarchy process. Then, based on CVSS vulnerability information, a quantitative evaluation model of network attack effect was established. Finally, an example is used for verification analysis. This method can make full use of the existing research results of aggressive behavior, the evaluation results are objective, the thinking is clear, the algorithm is simple, and it has strong universality and engineering application value.
