基于多核架构的安全漏洞分析平台研究  

Security Vulnerabilities Analysis Technology Based on Multi-core Architecture

作　　者：焦婉妮[1] 吴开贵[2] 

机构地区：[1]武汉数字工程研究所,武汉430074 [2]重庆大学计算机学院,重庆400030

出　　处：《计算机科学》2011年第10期117-120,共4页Computer Science

基　　金：国家自然科学基金重点项目"大型分布式软件系统的行为监控与可信演化"(90818028)资助

摘　　要：军工数字制造网络安全漏洞分析存在漏洞信息难以获取、分析和验证耗时长而且精度低等问题,传统的企业信息安全漏洞分析、测试验证技术不能够完全解决该问题,所以提出了基于多核架构的漏洞分析、验证、测补技术平台。将漏洞探测与分析技术、启发式漏洞渗透性测试技术、动态临时补丁生成和安装技术与基于多核处理器的软件架构相结合,实现漏洞分析、验证与测补的并行处理。原型系统实现与测试表明,该平台能够及时发现、完备验证、准确测试与有效补防军工企业数字化制造网络信息的安全漏洞,实现全生命周期功能平台与应用设备,为构建军工企业可信计算网络以及安全等级评估等工作提供有力的基础支撑。While conducting vulnerabilities analysis and testing in military enterprise network,it is difficult to get the vulnerability information and the analyzing or verifying process will be accomplished in a long time with relatively low precision.While traditional vulnerabilities analysis and testing techniques couldn＇t solve the problem in a good way,this paper proposed a vulnerabilities analysis platform based on multi-core architecture.The schema of vulnerabilities detecting and analyzing,heuristic penetrating test,dynamic patches creation and installation were combined with the software architecture based on multi-core processors to implement the parallel processing of vulnerabilities analysis,test and control.The implementation and experiment of prototype system prove that this platform can discover,verify,test the hidden vulnerabilities and make perfect patch in time for digital manufacturing network of military enterprises.It also will build a solid base for trustable computing network and security level estimation.

关 键 词：漏洞分析 多核架构 系统安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]