基于知识图谱推理的工控漏洞利用关系预测方法OA北大核心CSTPCD

With the rapid growth in the number of vulnerabilities in Industrial Control Systems,the time and economic costs required for manual analysis of vulnerability exploitation are constantly increasing,and current reasoning methods have many deficiencies such as insufficient utilization of information and poor interpretability.To address these problems,a prediction method for exploitation relationships of ICS vulnerabilities is proposed,which is based on knowledge graph reasoning.First,a path filtering algorithm is utilized to minimize the vulnerability exploitation paths.Then,path information is obtained by aggregating key relation paths,and neighbor information is acquired by integrating neighbor relation information.Finally,the exploitation relationships of vulnerabilities are predicted.An experiment on predicting exploit relationships was conducted using a knowledge graph for ICS security,which was built based on security knowledge data and ICS scenario data,and consisted of 57 333 entities.The results indicate that the proposed method can assist in predicting the exploitability of ICS vulnerabilities with an accuracy rate of 99.0％.