{'fraction_non_alphanumeric': 0.010112359550561797, 'fraction_numerical': 0.0, 'mean_word_length': 6.425, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
An Invocation Chain Test and Evaluation Method Based on Knowledge Graph

The paper, on basis of the software vulnerability description specification, works out the vulnerability knowledge base for vulnerability combination, completes the specification modeling of target environment information and vulnerability description, proposes the vulnerability instantiation attack mode, obtains the atomic attack set, improves the process of atomic attack node combination, and finally proposes the automatic construction algorithm of invocation chain to get the vulnerability combination information and invocation chain information of the target system. The experimental results show that the invocation chain test and evaluation method based on knowledge graph can evaluate the system risk quantitatively rather than qualitatively by calculating comprehensive probability on all test sequences.