基于任务驱动的云计算平台漏洞扫描系统  

Vulnerability scanning system for cloud computing platform based on task driven

作　　者：张海辉[1] 张勇[1] 欧争光 

机构地区：[1]深圳大学ATR国防科技重点实验室,深圳518060

出　　处：《深圳大学学报（理工版）》2014年第1期71-76,共6页Journal of Shenzhen University(Science and Engineering)

基　　金：国家科技支撑计划资助项目(2011BAH20B02);深圳市战略性新兴产业发展专项基金资助项目(ZDSY20120612094312435)~~

摘　　要：针对基础设施即服务云计算平台多目标虚拟机的漏洞扫描问题,设计一个多代理分布式漏洞扫描系统,提出一种分布式漏洞扫描任务分配算法.所设计的系统包括控制中心模块和检测代理模块,控制中心控制检测代理运行及分配扫描任务,检测代理实施漏洞扫描任务并返回扫描结果.提出的任务分配算法主要是根据待分配任务及检测代理负载信息分配扫描任务.采用OpenStack搭建了单节点云计算平台进行漏洞扫描模拟实验.实验结果表明,该算法可行、有效,并降低了多目标虚拟机的漏洞扫描耗时.A muhi-agent distributed vulnerability scanning system is proposed for vulnerability scanning on an IaaS （infrastructure as a service ） cloud computing platform. The system contains two modules of control center and multiple agents of scanning. The state of the agents, the assignment of task and the return of scanning results are determined by the control center. In the proposed task-assigning algorithm, the scanning tasks are assigned based on the the tasks to be allocated and the loading information on the agents. The single point IaaS cloud platform is implemented with OpenStack. The experiment results demonstrate that the proposed system is feasible and effective. The time required for vulnerability scanning in multi-virtual machines is also reduced.

关 键 词：信息安全 云计算 漏洞扫描 任务驱动 多代理 负载均衡 

分 类 号：TP319[自动化与计算机技术—计算机软件与理论]