A Case-Based Reasoning Method for Network Security Situation Analysis

This paper carries out research on vulnerability association problem in the complicated network and proposes the concept of "multi-node" vulnerability. By applying graph theory and case template to represent the "multi-node" vulnerability and reason the attack path, this paper describes how to reason the propagation path of the "multi-node" vulnerability and asses the security situation in the network based on the case-based reasoning and gives the CBR system prototype implementation.