中文摘要：

基于渗透模型的网络攻击路径挖掘方法，通过匹配知识库定义的基本渗透过程，模拟攻击过程中网络安全状态变迁，挖掘可能达到特定攻击目标的攻击路径．以此为基础，在攻击发生前给出最小关键攻击／漏洞集，攻击发生时过滤、关联告警，评估安全态势．

英文摘要：

An infiltration model-based attack path analysis method was proposed which can simulate network security state changes and give out attack paths that may lead to certain attack goals. The method can provide network administrators the minimum critical attack/vulnerability sets before any network attack happens. And when an attack is undergoing, it can help to filter and correlate security alerts as well as evaluate network security situation.