校园网补丁升级与漏洞扫描方案的研究  

The study in updating patch of operation system and scanning leak on campus network

作　　者：周绯菲[1] 张荻[2] 郝晓冰[3] 王观海[3] 鲁士文[4] 

机构地区：[1]北京交通管理干部学院计算机系,北京100020 [2]天津理工大学中环信息学院,天津300380 [3]燕山大学图书馆,秦皇岛066004 [4]中国科学院研究生院,北京100020

出　　处：《天津理工大学学报》2008年第4期85-88,共4页Journal of Tianjin University of Technology

摘　　要：本文以某单位校园网为研究对象,针对现阶段校园网主要面临的蠕虫泛滥的问题,在相关理论研究的基础上结合校园网的三期安全改造工程进行了安全方案的研究.本文设计了将计费网关与漏洞扫描及流量监测技术相结合的方案,解决了校园网客户端用户主机补丁包升级、校园网客户端主机漏洞扫描、漏洞主机提示以及暂时中止中毒主机访问互联网等问题,收到了较好的效果.本研究对于其他中型规模的校园网络或企业网络具有一定的参考价值.The paper focuses on the improvement of the security of the campus network in an Institute. Based on the analyses of the situation of the present campus network as well as the related theories, a security scheme is researched and designed both from the theoretical and practical perspectives in combination with the three - phase security improvement project in the campus network. In the paper, the writer proposes adding a charging gateway in combination with leak scanning and net flow monitoring technology. The scheme intends to solve the problems in several aspects： patching operation system, scanning serious leak, promoting computers that have serious leaks, and fighting against worms. It is able to suspend the intemet-visiting qualification on computers which have been infected by worms until such worms are cleared. It is able to notify the users who have some serious leaks in their operation systems or have not patched their operation systems in time in login page of the charging gateway, enjoying better effects and having some referencing value to other middle-scale campus networks or enterprise networks.

关 键 词：网络安全 漏洞扫描 补丁升级 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]