Abstract: With the increasing complexity and diversity of cybersecurity threats,traditional defense techniques are struggling to cope with evolving attack methods.Endogenous security technologies,especially those based on metamorphic defense,exhibit strong defense capabilities due to their dynamic adaptability,heterogeneity,and redundancy.This paper proposes an evaluation method for the defense effectiveness of endogenous security technologies based on attack graph modeling.By constructing network attack path models,the method quantifies the defense effects of endogenous security technologies in various attack scena-rios.Firstly,attack graph modeling is employed to describe network node vulnerabilities,attack paths,and their evolution,enabling the quantitative analysis of attacker behavior.Next,the impact of endogenous security technologies on attack paths is examined,with pre-implementation and post-implementation comparisons to assess defense effectiveness.The paper establishes a hierarchical security measurement framework,assessing the defense capabilities of inherent security technologies in terms of static defense at the node level,dynamic defense at the attack path level,and resilience recovery at the system level.Finally,simulation experiments demonstrate the effectiveness of the proposed evaluation method,providing a scientific basis for the quantitative evaluation of endogenous security technologies.

Key words: Endogenous security, Metamorphic defense, Attack graph, Defense effectiveness evaluation, Security measurement