基于攻击目的的软件攻击分类方法研究  

RESEARCH ON ATTACK PURPOSE-BASED SOFTWARE ATTACK CLASSIFICATION METHOD

作　　者：薛芳芳[1] 房鼎益[1] 王怀军[1] 王瑾榕 龚晓庆[1] 

机构地区：[1]西北大学信息科学与技术学院,陕西西安710127

出　　处：《计算机应用与软件》2015年第2期283-287,共5页Computer Applications and Software

基　　金：国家自然科学基金项目(61070176;61170218;61272461);高等学校博士点基金项目(20106101110018);陕西省科技攻关计划项目(2011K06-07);陕西省教育厅产业化培育项目(2011jg06)

摘　　要：针对目前软件攻击方法复杂多变、层出不穷,软件攻击分类散乱、不成体系的问题,通过研究和分析软件攻击方法,提出基于攻击目的的软件攻击分类框架,并对其进行评价,力图为解决软件攻击分类这一科学问题提供思路,为建立攻击知识模型奠定基础,并为以安全检测或安全性评测为目的的研究人员提供清晰的攻击思路,为构建用于安全保护的软件攻击体系打下理论基础。Aiming at the problems that at present the software attack technologies are complex and changeable and come out one after another, and the attacks classification appears to be scattered and fragmented, we put forward the attack purpose-based software attack classification framework by studying and analysing software attack technologies, and give the evaluation on the framework as well in order to try hard to provide an idea for the solution of the scientific problem of software attack classification, and lay the foundation for building the attack knowledge model, as well as suggest the clear attacking ideas for researchers whom are working for security detection or safety test and evaluation, thus do the theoretical spadework for constructing the software attack system aiming at the security protection.

关 键 词：软件攻击 攻击描述 攻击分类 分类评价 攻击技术 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]