计算机安全漏洞分类研究  

A study on the classification of computer security vulnerability

作　　者：汪贵生[1] 夏阳[2] 

机构地区：[1]铜陵学院,安徽铜陵244000 [2]解放军电子工程学院,安徽合肥230037

出　　处：《计算机安全》2008年第11期68-72,共5页Network & Computer Security

基　　金：安徽省高等学校自然科学研究项目(KJ2008B23ZC)

摘　　要：计算机及网络安全问题的根源在于计算机漏洞的存在。漏洞是实施网络攻击和加强网络防护的关键因素,漏洞的分类研究是漏洞研究的基础。该文首先给出了计算机安全漏洞的定义并分析了漏洞分类的重要意义,然后介绍了典型的漏洞分类方法和目前常用的漏洞分类法,在此基础上,从多维分类方式和动态变化方式上提出了漏洞分类的进一步研究方法。The problem of computer and network security derives from computer vulnerability.It is the key factor for vulnerability to carry out network attack and strength network defense.The study of vulnerability classification is the foundation of vulnerability study.At first,the paper introduces the definition of computer security vulnerability and analyzes the important signification of vulnerability classfication.Then the paper presents a typtical method of vulnerability classification and a useful vulnerability classification at present . At last the thesis points out a further study method on vulnerability classification based on multi-dimensional classification and dynatic change.

关 键 词：网络安全 漏洞 脆弱性 分类 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]