Comprehensive Assessment Model of Network Vulnerability Based upon Refined Mealy Automata

Abstract

To evaluate the vulnerability of a network of hosts comprehensively, a security analyst must take into account the effects of interactions between these vulnerabilities. This paper proposes Comprehensive Assessment Model (CAM) to illustrate the multi-stage attack action and evaluate network vulnerability in context. We make use of first-order predicate calculus to formally refine the Mealy Automata based CAM model. And then we in detail demonstrate the application of this model, in which we have applied the Analytic Hierarchy Process (AHP) to the measurement of vulnerability degree and conclude the security solution.