带策略与管理的安全评估系统研究与实现  

Research and Implementation of Security Assessment System Based on Policy and Management

作　　者：夏冰[1,2] 裴斐[1] 郑秋生[1,2] 

机构地区：[1]中原工学院 [2]郑州市计算机网络安全评估技术重点实验室,郑州450007

出　　处：《中原工学院学报》2009年第6期29-34,共6页Journal of Zhongyuan University of Technology

基　　金：河南省科技攻关项目(092102310038;092102210029)

摘　　要：针对当前评估因素偏重于漏洞,提出了一种多元安全扫描技术方案,设计了一种融合策略和管理安全因素的定性和定量的评估方法.在系统总体设计与详细分析的基础上,开发了主机安全评估工具并完成系统测试,验证结果表明,该系统在功能、自身安全、管理和性能方面达到公安部制定的主机检验标准.In the filed of network security, Host Security Assessment System is hot research. Currently research emphasized on vulnerability assessment, this paper brings forward an assessment model with multi-data fusion technique and a method with the qualitative and quantitative assessment by adding a security policy and management. Based on system design and implementation, verify the system functions, security, management and performance, to meet the Ministry of Public Security standard .

关 键 词：网络安全 主机评估 安全策略 管理配置 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]