An attack graph generation method based on heuristic searching strategy

Aiming at the problem that it is difficult to generate attack graph for large-scale network, an approach is proposed to generate global attack graph based on heuristic searching strategy. Firstly, it describes the network environment and attack patterns using predicate logic. Secondly, the algorithm of generating the attack graph is divided into two parts: the generation of Matching Index Table (MIT) and attack graph structure. The MIT, designed to store the latest matching results of atomic attacks, can not only provide the guidance for searching the atomic attacks with big possibility, but also lay the foundation for generating the graph structure. The experimental results show that the proposed method can improve the efficiency of attack graph generation.