State Grid Network Attack-defense Graph Generation Method

The attack-defense graph is a model-based network vulnerability analysis technique. Utilizing the characteristics of State Grid, this paper extends the attack-defense graph model and proposes a state attack-defense graph model. The state attack-defense graph use rules to model the attacker, and display all threat propagation paths which are generated by the attacker exploiting the dependence relations among vulnerabilities in the target network. In conjunction with prevention and control measures for vulnerability, the corresponding protection solution is proposed. In order to automatically generate the state attack-defense graph according to the network’s topology information, reachable relationship of nodes and vulnerability information, a generating algorithm of the state attack-defense graph is proposed.