一种网络威胁量化分析新方法

贺伟，   梁潘

（阿坝师范高等专科学校 物理与电子科学系；应用物理研究所，四川 汶川 623002）

 摘要: 本研究采用基于时间Petri网的脆弱性关系模型来解决网络威胁分析方面的问题，从而为威胁量化分析提供参考。通过与面向对象技术的结合，该模型适合对网络攻击做详细描述，形象反映各脆弱状态之间的关系。通过界定攻击威胁和各指数的量化方法，对模型引入网络攻击的复杂度和危害度，提出基于非目标的网络威胁分析法。实验证明基于威胁分析法的模型更合理、更有效。

关键词: 网络安全; 威胁分析; 脆弱关系模型; 面向对象; 时间Petri网

中图分类号: TP 393                             文献标志码: A

 A New Method of Network Threat Analysis

HE Wei, LIANG Pan

（Department of Electronic Information; Institute of Applied Physics，

ABA Teachers College, Wenchuan 623002, China）

 Abstract: We adopt the vulnerability relation model based on time Petri net to solve the network threat analysis problems, for the threat analysis. By combining with the objectoriented technology, the model apply to detailed description of the network attack, reflects the relationship of the fragile states. By quantitative methods of defining the various indices of threats and attacks, We introduce the complexity of network attacks and hazards，and proposed network threat analysis method based on nontarget.Experiments prove that the threat analysis based model is more reasonable and more effective.

Key words: network security; threat analysis; vulnerability relation model; objectoriented; time Petri net

收稿日期： 20131228

基金项目： 国家自然科学基金项目(61373163)；四川省教育厅项目(13ZB0038).

作者简介： 贺伟（1980—）,男，讲师.