面向等级保护的漏洞扫描系统的设计与实现  

Design and Implementation Based on the Classification Protection Vulnerability Scanning System

作　　者：王超[1,2] 卢志刚[1,2] 刘宝旭[1] 

机构地区：[1]中国科学院高能物理研究所计算中心,北京100049 [2]中国科学院研究生院,北京100049

出　　处：《核电子学与探测技术》2010年第7期865-869,912,共6页Nuclear Electronics & Detection Technology

基　　金：国家科技支撑计划重点项目(2009BAH52B06);中科院知识创新重点方向性项目

摘　　要：随着等级保护的应用和普及,网络安全漏洞扫描需充分考虑执行效率和功能的扩展性问题。从等级保护的角度提出一个系统安全漏洞的分类,阐述了一个基于漏洞分类插件技术、面向等级保护的漏洞扫描系统的设计和实现。实验表明,系统对于分级保护的应用具有良好的适应性和可扩展性,并有效提高了扫描效率。With the application and spread of the classification protection, Network Security Vulnerability Scanning should consider the efficiency and the function expansion. It proposes a kind of a system vulnerability from classification protection, and elaborates the design and implementation of a vulnerability scannirig system based on vulnerability classification plug--in technology and oriented classification protection. According to the experiment, the application of classification protection has good adaptability and scalability with the system, and it also approves the efficiency of scanning.

关 键 词：信息安全 等级保护 漏洞扫描 扩展性 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]