A new method for network threat quantification analysis

Considering the problem in network threat analysis, the paper proposes a vulnerability relation model based on extended time Petri net, which can lay the foundation for threat quantification analysis. Combined with object-oriented technology, the model is suitable for describing complicated network attack, which can reflect relation among vulnerable states iconically. By defining the threat of an attack and each index's quantization method, the paper introduces complexity and harmfulness of network attack in the model, and then proposes non-target oriented network threat analysis method. Experiment proves the correctness and performance of vulnerability relation model, and the threat analysis method based on the model is more reasonable and effective.