基于特征的网络漏洞态势感知方法研究  

Research on the Method for Network Vulnerabilities Situational Awareness Based on the Features

作　　者：高川[1] 严寒冰 贾子骁 

机构地区：[1]北京航空航天大学计算机学院,北京100191 [2]国家计算机网络应急技术处理协调中心,北京100020

出　　处：《信息网络安全》2016年第12期28-33,共6页Netinfo Security

基　　金：国家科技支撑计划[2015BAK21B01]

摘　　要：随着互联网规模的持续扩大,互联网安全问题日益严峻,互联网设备和应用的安全态势成为所有网络用户重视的内容。文章提出一种基于特征的互联网设备和应用的测量方法。首先,对设备和应用进行特征提取,采用主动探测和被动监测相结合的方法,得到设备和应用的信息。然后,对得到的信息进行分析,描绘互联网设备和应用的漏洞分布态势。文章对3种设备和应用进行测量,验证了该方法,探测了它们的漏洞分布情况。漏洞分布态势图可以帮助网络管理员有效理解互联网设备和应用的状态,及时发现漏洞并进行修补。With the continuous development of the Internet, the security problems of the Internet are more and more serious. The security situations of the Internet devices and applications have gotten Internet users＇ more attentions. This paper puts forward a measurement method of the Intemet devices and applications based on the features. Firstly, the features of the Internet devices and applications are extracted. By combining the methods of active detection and passive monitoring, the information of the Internet devices and applications is obtained. Then by analyzing the information of the Internet devices and applications, the paper depicts the vulnerabilities distribution situations of the Internet devices and applications. The paper verifies the method by measuring three different Interact devices and applications, and detects their vulnerabilities distribution situations, which can help the administrators understand the situations of the Internet devices and applications effectively, and find vulnerabilities and repair them in time.

关 键 词：特征提取 主动探测 被动监测 安全态势 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]