Abstract: In order to evaluate the network security, a real-time security assessment method based on dynamic attack graph was presented. At first, network security related information such as network vulnerabilities, topology information,asset value,IDS alerts,and firewall rules was fused into attack graph. Then network security situation was evaluated and results were shown through visualization method, on this basis, some corresponding suggests were given to improve security. Finally, the feasibility and validity of this method were proved through some experiments.

Key words: Dynamic attack graph, Rcal-time assessment, Confront information of attack and defense