Multiobjective network security dynamic assessment method based on Bayesian network attack graph

• Published in: International journal of intelligent computing and cybernetics Vol. 17; no. 1; pp. 38 - 60
• Main Authors: Xie, Jialiang, Zhang, Shanli, Wang, Honghui, Chen, Mingzhi
• Format: Journal Article
• Language: English
• Published: Bingley Emerald Publishing Limited 29-02-2024; Emerald Group Publishing Limited
• Subjects: Algorithms; Availability; Bayesian analysis; Cybersecurity; Decision making; Evolutionary algorithms; Fuzzy sets; Internet of Things; Methods; Multiple objective analysis; Network security; Neural networks; Ransomware; Renewable resources; Risk assessment; Multiobjective risk assessment model; Bayesian network attack graph; GWO-SMEA; Network security assessment
• ISSN: 1756-378X; 1756-3798
• DOI: 10.1108/IJICC-05-2023-0121

PurposeWith the rapid development of Internet technology, cybersecurity threats such as security loopholes, data leaks, network fraud, and ransomware have become increasingly prominent, and organized and purposeful cyberattacks have increased, posing more challenges to cybersecurity protection. Therefore, reliable network risk assessment methods and effective network security protection schemes are urgently needed.Design/methodology/approachBased on the dynamic behavior patterns of attackers and defenders, a Bayesian network attack graph is constructed, and a multitarget risk dynamic assessment model is proposed based on network availability, network utilization impact and vulnerability attack possibility. Then, the self-organizing multiobjective evolutionary algorithm based on grey wolf optimization is proposed. And the authors use this algorithm to solve the multiobjective risk assessment model, and a variety of different attack strategies are obtained.FindingsThe experimental results demonstrate that the method yields 29 distinct attack strategies, and then attacker's preferences can be obtained according to these attack strategies. Furthermore, the method efficiently addresses the security assessment problem involving multiple decision variables, thereby providing constructive guidance for the construction of security network, security reinforcement and active defense.Originality/valueA method for network risk assessment methods is given. And this study proposed a multiobjective risk dynamic assessment model based on network availability, network utilization impact and the possibility of vulnerability attacks. The example demonstrates the effectiveness of the method in addressing network security risks.