Risk Calculation Based on Source and Destination of Attack Events

Network risk assessment has become a hot topic in the area of network security research in recent years. Risk Calculation in the risk assessment is a very important part. Some methods have been presented to resolve this problem. These methods have strengths and drawbacks. In order to achieve more actual risk assessment result of network system, this paper proposed a new network risk calculation method based on Source and Destination of attack events, the two risks to determine whether the event is a alert from two different aspects in order to reflect the security of the entire network. At the end, through the experimental results with DARPA Data sets 2000 from Lincoln laboratory, it demonstrates the potential of the proposed method.