Research on Network Risk Evaluation Method Based on a Differential Manifold

Abstract

With the rapid development of networks, network security is a serious problem. To evaluate a network accurately, this paper proposes a network risk evaluation method based on a differential manifold (DM) and research on traditional methods. The DM divides the network risk evaluation into network structure risk and network behavior risk evaluations. Network structure risk evaluates the network identity, and network behavior risk evaluates the attack and defense of the network. Network assets and asset vulnerabilities characterize a network, and the analytic hierarchy process (AHP) and the Common Vulnerability Scoring System (CVSS) are combined to evaluate the network identity. Network behavior causes high-dimensional indicator changes, and DMs are used to measure network behavior. To examine the effectiveness and accuracy of DMs, two experiments were performed. The experimental results show that the DM method is valid and accurate for evaluating network risk.INDEX TERMS Network risk evaluation, differential manifold, Riemannian manifold, analytic hierarchy process, common vulnerability scoring system.

Research on Network Behavior Risk Measurement Method Based on Traffic Analysis

“…With the continuous development of network security performance requirements, the previous measurement methods are difcult to meet the needs of measurement accuracy and accuracy, and the introduction of mathematical principles can describe the network security situation with more objective and accurate methods and values [21,22]. In this study, the diferential manifold theory is applied to network behavior risk measurement.…”

“…Compared with traditional methods, network security assessment based on diferential manifold can solve problems that are not objective and comprehensive and can better refect the impact of changes in security metrics on network security changes, making the metrics more objective and accurate than previous assessment methods [21,27]. At the same time, the network security evaluation method based on diferential manifold can consider the network security risk at multiple levels and explain the transformation of the network security state from the perspective of attack and defense utility.…”