4、网络安全评估与伪装攻击检测技术解析

网络安全评估与伪装攻击检测技术解析

网络漏洞评估中的模型抽象

在网络安全评估领域，模型抽象是一种有效的方法，可用于优化攻击图的生成和定量安全评估。
- 配置分解算法 ：有一个基于配置的分解算法，其伪代码如下：

Input: A list L, each element of which is a set of machines belonging to the same
reachability group, and with the vulnerabilities grouped.
Output: Further-refined group Sc based on vulnerability information. Each element
in Sc is a representative for a group of hosts with the same reachability and configuration.
while L̸={} do
    remove h from L
    Lr ←empty map; {Lr is a set of pairs (hostname, configuration). It is used to
    store the distinct configurations that have appeared so far.}
    if Lr contains ( , h.configuration) then
        continue {if its configuration has appeared before, sk