CVE数据库及其在入侵检测中的应用  

Common Vulnerabilities & Exposures Database and it's Application in Intrusion Detection System

作　　者：乔佩利[1] 赵文军[1] 赵妍[1] 

机构地区：[1]哈尔滨理工大学计算机与控制学院,黑龙江哈尔滨150080

出　　处：《哈尔滨理工大学学报》2004年第4期69-72,共4页Journal of Harbin University of Science and Technology

基　　金：黑龙江省自然科学基金项目(F02-04)

摘　　要：针对当前计算机公共弱点/风险(CVE)列表的杂乱无章,通过对CVE列表所列漏洞进行深入的研究,给出了对漏洞进行分类的6种方法,并设计实现了一个中文CVE分类数据库,将该数据库应用到CVE论坛,并讨论人在入侵检测中的应用,实验结果证明,给出的分类方法有利于CVE的管理和应用。In this paper, according to the disorder of the common vulnerabilities and exposures(CVE) leaks, we present six methods for classifying CVE leaks basing on the research of all the current leaks. We design and implement a Chinese CVE database, based on which we build a CVE BBS. Moreover, the paper discusses how to apply the CVE database to intrusion detection system. The result of experiment proves that the six methods are favorable to management and application of CVE.

关 键 词：网络安全 CVE 入侵检测 漏洞库 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]