A Survey on Attack Graph

Early detection of network vulnerabilities and adoption of security measures are crucial for individuals, businesses, and the country. The applications and future for attack graph were forecasted. Attack graph have become one of the mainstream technologies for vulnerability analysis in enterprise networks. We compared and analyzed state attack graph, attribute attack graph, and Bayesian attack graph in terms of vertex semantics, edge semantics, advantages and disadvantages. In addition, the attack graph generation tools TVA, Cauldron, MulVAL, NetSPA, FireMon, Attack Graph Toolkit, and Skybox View are compared and analyzed in terms of developers, open sourcet, commercial, graphical user interfaces, algorithmic complexity, and number of hosts.