A new method for network threat quantification analysis

Considering the problem in network threat analysis, the paper proposes a vulnerability relation model based on extended time Petri net, which can lay the foundation for threat quantification analysis. Combined with object-oriented technology, the model is suitable for describing complicated network attack, which can reflect relation among vulnerable states iconically. By defining the threat of an attack and each index´s quantization method, the paper introduces complexity and harmfulness of network attack in the model, and then proposes non-target oriented network threat analysis method. Experiment proves the correctness and performance of vulnerability relation model, and the threat analysis method based on the model is more reasonable and effective.