Систематизація підходів до кількісної оцінки мережевої безпеки з використанням графів атак

Abstract

. Attack graphs are widely used for modeling multi-step intrusions in computer networks and for developing quantitative security metrics. This paper proposes a taxonomy of approaches to the quantitative assessment of network security based on attack graphs, developed through the analysis of contemporary research. The taxonomy classifies existing approaches according to the type of attack graph model, the type of security metrics, the temporal aspect of assessment, and the intended purpose of the metrics. The proposed classification provides a systematic view of existing solutions and highlights directions for further research in quantitative network seurity analysis.