弱点数据库的建构及其应用研究  

Study on Construction and Application of Vulnerability Database

作　　者：欧鑫凤[1] 胡铭曾[1] 张涛[1] 张永铮[1] 

机构地区：[1]哈尔滨工业大学计算机网络与信息安全技术研究中心,黑龙江哈尔滨150001

出　　处：《计算机应用研究》2007年第3期213-214,217,共3页Application Research of Computers

基　　金：国防十五预研项目(41315.7.1)

摘　　要：引入了特权集、机密性、完整性和可用性等量化属性,设计并实现了一个量化的多属性弱点数据库,同时对弱点数据进行了进一步的分析。实践表明,该弱点数据库能够为安全评估提供更细致、更有力的弱点信息支持。Authors designed and established a multi-attribute quantitative vulnerability database, by introducing attributes like privilege sets, confidentiality, integrality, availability. The vulnerability information was also analyzed further. Practice has proved that it is a more comprehensive and powerful way for security assessment system by using this vulnerability information support.

关 键 词：弱点数据库 弱点分类法 安全评估 特权提升 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]