An Augmented 0-day Attack Graph Generation Method

Abstract

Attack graph is an important tool for analyzing network attack. However, the traditional attack graph does not take 0-day vulnerability into account. It is difficult to analyze the attack path with 0-day vulanrability based on traditional attack graph. In this work, we modelled the 0-day vulnerability and its exploiting rules, and bulit an augmented 0-day attack garph, which enables us to analyze the attack path with 0-day vulnerability. The experiment indicated that we could get the attack path with 0-day vulnerability.