利用网络服务关联性评估网络漏洞风险  

Network Vulnerability Assessment Using Network Service Correlation

作　　者：翟继强[1] 唐远新[1] 黄李龙[1] 

机构地区：[1]哈尔滨理工大学计算机科学与技术学院,黑龙江哈尔滨150080

出　　处：《哈尔滨理工大学学报》2013年第4期79-83,共5页Journal of Harbin University of Science and Technology

基　　金：黑龙江省科技公关项目(GZ11A304);黑龙江省教育厅科学技术面上项目(12531121)

摘　　要：针对网络漏洞风险评估应用中,只考虑网络节点连通性和节点关联性,而忽略不同节点服务之间存在支撑关系的问题,提出基于网络服务关联性的网络漏洞风险评估方法.给出了网络服务关联性(NSC)的相关定义,讨论了NSC的分类和量化,分析了NSC安全影响权值的判定方法,并通过一个网络应用实例证明利用NSC有利于提高网络漏洞风险评估的准确性.In the research field of network vulnerability assessment, network code connection and network code correlation have been introduced, but sustain relationships of diverse services offered by network codes were neglec- ted. Thus a network vulnerability assessment method based on Network Service Correlation （NSC） is presented. Firstly the relevant concepts about NSC are defined. Then taxonomy and qualification of NSC are discussed, and method to judge the security affecting weight value of NSC is analyzed. Finally an application instance proves that this method can improve the accuracy of network vulnerabilities assessment.

关 键 词：网络服务关联性 网络漏洞风险评估 服务关联网络 服务风险传播网络 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]