Realization algorithm of satellite network attack graph based on performance state space

For the problems that the existing networks attack graph can not analyze the effects of attack behavior on network performance and the application in the vulnerability analysis of satellite network is limited, a realization method of system performance-oriented attack graph was proposed. The Virtual Performance Node (VPN) was defined and taken as the attack graph state. The system performance loss expected by attacker was regarded as the objective of attack behavior, and the variation of system performance was abstracted into the transition of performance state space. The threatening degree of each attack path was determined according to the realization probability of single step attack. This method can not only describe the attack behavior, but also reflect the attack effect in performance management view and ensure the application of attack graph theory in satellite communication network. The experimental results show that the improved attack graph scheme is more accord with the human cognitive habit and can be used in the vulnerability analysis of satellite network effectively.