一种服务端口风险评估模型  

A Service Port Risk Evaluation Model

作　　者：王熠[1] 肖竟华[1] 

机构地区：[1]武汉科技大学计算机科学与技术学院,武汉430065

出　　处：《电脑与信息技术》2009年第1期62-64,72,共4页Computer and Information Technology

摘　　要：网络漏洞评估方法用于决策漏洞的修补优先级。文章在CVSS评级系统基础上,综合攻击者获取权限,端口连接数量,漏洞历史等因素,提出一种服务端口风险评估模型,提高了漏洞评估的准确度。之后,根据风险值大小,利用访问控制对服务端口进行屏蔽,可以防范目前缺乏补丁的最新漏洞。Network vulnerability evaluation can help to make policy decision on which vulnerabilities to patch first. The paper proposed a network port risk evaluation model, incorporating the aspect of the authority that attacker aiming to gain, the number of TCP or UDP links on each port, the history of vulnerability, based on the Common Vulnerability Scoring System, which improves the accuracy of vulnerability evaluation. Next, according to the value of the previous port risk evaluation, service ports are blocked with priority within access control list scripts, which can also prevent attackers who exploit vulnerabilifies without existing patches.

关 键 词：端口风险 漏洞评估 访问控制 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]