Risk assessment of oil and gas production IoT system based on Bayesian attack graph
Aiming at the dynamic risk assessment of oil and gas production IoT system,a risk assessment model of oil and gas production IoT system based on Bayesian attack graph was proposed.Firstly,through the risk analysis of the system,the intrusion evidence and system vulnerabilities are obtained,combined with the intrusion evidence and the success probability of vulnerability exploitation,the EM algorithm is used to complete the data of the training data and dynamically update the conditional probability parameter table of the Bayesian attack graph,the prior probability can be calculated through the conditional probability table,and the posterior probability of the node is calculated by combining the intrusion evidence,then the risk value of the system is ob-tained,and the risk value is finally corrected considering the correlation of resource utilization.The simulation results have proved the effectiveness and accuracy of the model.
Bayesian attack diagramBayesian parameter learningvalue-at-risk calculationrisk value correction
万方数据
维普
