信息安全漏洞全生命周期管理  

Full life-cycle management of information security vulnerabilities

作　　者：付俊[1] 冯运波[2] 杨光华[1] 张峰[1] 粟栗[1] 

机构地区：[1]中国移动通信研究院,北京100053 [2]中国移动通信集团公司,北京100032

出　　处：《电信工程技术与标准化》2012年第12期23-26,共4页Telecom Engineering Technics and Standardization

摘　　要：本文以某网上营业厅重置任意用户密码漏洞为线索,详细介绍了漏洞的概念以及漏洞的整个生命周期,包括漏洞的产生、发现、公开、管理和消亡,并详细介绍了漏洞在生命周期中每个阶段的成因、形式、发现方法和具体的应对措施。In this paper, to an online business hall reset any user password vulnerability for clue, we introduced the concept of vulnerability, and vulnerability of the entire life cycle, including the generation of vulnerability discovery, disclosure, management and demise. Meanwhile, the paper described in detail the vulnerabilities in each stage in the life cycle of the causes, forms of discovery methods and specific measures to deal with.

关 键 词：信息安全 漏洞 生命周期 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]