A Method for Global Attack Graph Generation

Existing attack graph generation methods can only generate attack graphs for the single target, and the scale of the generated graphs is too large. To solve these problems, a global attack graph generation method is proposed on the basis of breadth-first search algorithm. The strategies that limit attack steps and success probability of attack paths are adopted to reduce the scale of the attack graph. The experimental results indicate that using the graph which is generated by this method can analyze network vulnerabilities from the global angle. In addition, this method is validated that it is effective to remove the redundancy edges and nodes of the attack graph, consequently reduces the scale of the attack graph.