基于主题爬虫的漏洞库维护系统  

Vulnerability Database Maintenance System Based on Topic Web Crawler

作　　者：刘海燕[1] 黄睿[1] 黄轩[1] 

机构地区：[1]装甲兵工程学院信息工程系,北京100072

出　　处：《计算机与现代化》2014年第8期67-70,80,共5页Computer and Modernization

摘　　要：漏洞库是用来存储漏洞信息的数据库,是信息安全基础设施的重要组成部分。将主题爬虫技术引入漏洞数据库的维护工作,通过主题网络爬虫获取与"漏洞"相关的网页,从中提取漏洞信息来更新漏洞数据库,降低了人工维护的工作量,改善了现有漏洞库存在漏洞覆盖不全面、内容不丰富的问题。分析当前国内外主要漏洞库的结构特征,研究漏洞诸多属性间的关系,运用组群分类描述法构建漏洞库结构模型。在研究主题网络爬虫的基础上,提出一种面向漏洞主题的动态主题构建方案。介绍漏洞库维护系统的总体设计和实现方法。Vulnerability database is an important part of information security infrastructure used for storing vulnerability information. This paper introduced topic Web crawler into the vulnerability database maintenance system,in which the webpages that are related to vulnerabilities can be accessed through topic Web crawler and the vulnerability information can be abstracted so as to update the vulnerability database. This technology reduced the workload of maintenance and resolved the problems of coverage incompletion and lack of information in the existing vulnerability database. By analyzing the structure of the existing vulnerability database at home and abroad,studying the association of vulnerability attributes,and implementing group classification description method,this paper built a vulnerability database syntactic model. It also came up with a dynamic topic construction scheme for vulnerability topic,introducing design and implementation of vulnerability database maintenance system.

关 键 词：主题爬虫 动态主题 漏洞模型 漏洞库 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]