Key path analysis method for large-scale industrial control network
In order to solve the problem of high time-consuming and resource-consuming quantitative calculation of large-scale industrial control network attack graphs, a key path analysis method for large-scale industrial control networks was proposed.Firstly, the idea of cut set was used to calculate the key...
Saved in:
| Main Authors: | , , , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
POSTS&TELECOM PRESS Co., LTD
2021-12-01
|
| Series: | 网络与信息安全学报 |
| Subjects: | |
| Online Access: | http://www.cjnis.com.cn/thesisDetails#10.11959/j.issn.2096-109x.2021069 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1841529786727399424 |
|---|---|
| author | Yaofang ZHANG Zheyu ZHANG Haikuo QU Ge ZHANG Zibo WANG Bailing WANG |
| author_facet | Yaofang ZHANG Zheyu ZHANG Haikuo QU Ge ZHANG Zibo WANG Bailing WANG |
| author_sort | Yaofang ZHANG |
| collection | DOAJ |
| description | In order to solve the problem of high time-consuming and resource-consuming quantitative calculation of large-scale industrial control network attack graphs, a key path analysis method for large-scale industrial control networks was proposed.Firstly, the idea of cut set was used to calculate the key nodes set of Bayesian attack graph by combining the atomic attack income in industrial control network, which solved the problem that the current cut set algorithm only considers the key nodes in graph structure.Secondly, a dynamic updating strategy of Bayesian attack graph which only updated the attack probability of key nodes was proposed to efficiently calculate the attack probability of the whole graph and analyze the key path of attack graph.The experimental results show that the proposed method can not only ensure the reliability of the calculation results of large-scale industrial control attack graphs, but also can significantly reduce the time consumption and have a significant improvement in the calculation efficiency. |
| format | Article |
| id | doaj-art-4add30a5883f4d5c83f325eceb36baa0 |
| institution | Kabale University |
| issn | 2096-109X |
| language | English |
| publishDate | 2021-12-01 |
| publisher | POSTS&TELECOM PRESS Co., LTD |
| record_format | Article |
| series | 网络与信息安全学报 |
| spelling | doaj-art-4add30a5883f4d5c83f325eceb36baa02025-01-15T03:15:18ZengPOSTS&TELECOM PRESS Co., LTD网络与信息安全学报2096-109X2021-12-017314359569454Key path analysis method for large-scale industrial control networkYaofang ZHANGZheyu ZHANGHaikuo QUGe ZHANGZibo WANGBailing WANGIn order to solve the problem of high time-consuming and resource-consuming quantitative calculation of large-scale industrial control network attack graphs, a key path analysis method for large-scale industrial control networks was proposed.Firstly, the idea of cut set was used to calculate the key nodes set of Bayesian attack graph by combining the atomic attack income in industrial control network, which solved the problem that the current cut set algorithm only considers the key nodes in graph structure.Secondly, a dynamic updating strategy of Bayesian attack graph which only updated the attack probability of key nodes was proposed to efficiently calculate the attack probability of the whole graph and analyze the key path of attack graph.The experimental results show that the proposed method can not only ensure the reliability of the calculation results of large-scale industrial control attack graphs, but also can significantly reduce the time consumption and have a significant improvement in the calculation efficiency.http://www.cjnis.com.cn/thesisDetails#10.11959/j.issn.2096-109x.2021069key nodekey pathattack graphBayesian networkindustrial control network |
| spellingShingle | Yaofang ZHANG Zheyu ZHANG Haikuo QU Ge ZHANG Zibo WANG Bailing WANG Key path analysis method for large-scale industrial control network 网络与信息安全学报 key node key path attack graph Bayesian network industrial control network |
| title | Key path analysis method for large-scale industrial control network |
| title_full | Key path analysis method for large-scale industrial control network |
| title_fullStr | Key path analysis method for large-scale industrial control network |
| title_full_unstemmed | Key path analysis method for large-scale industrial control network |
| title_short | Key path analysis method for large-scale industrial control network |
| title_sort | key path analysis method for large scale industrial control network |
| topic | key node key path attack graph Bayesian network industrial control network |
| url | http://www.cjnis.com.cn/thesisDetails#10.11959/j.issn.2096-109x.2021069 |
| work_keys_str_mv | AT yaofangzhang keypathanalysismethodforlargescaleindustrialcontrolnetwork AT zheyuzhang keypathanalysismethodforlargescaleindustrialcontrolnetwork AT haikuoqu keypathanalysismethodforlargescaleindustrialcontrolnetwork AT gezhang keypathanalysismethodforlargescaleindustrialcontrolnetwork AT zibowang keypathanalysismethodforlargescaleindustrialcontrolnetwork AT bailingwang keypathanalysismethodforlargescaleindustrialcontrolnetwork |