基于渗透测试的网络安全评估技术研究  

Researchon network security assessment technology based on penetration test

作　　者：孟敏 MENG Min(Wuxi Vocational and Technical College Electronic Information Department,Wuxi Jiangsu,214206)

机构地区：[1]无锡工艺职业技术学院电子信息系

出　　处：《自动化与仪器仪表》2018年第10期182-184,共3页Automation & Instrumentation

摘　　要：针对传统网络安全保护系统不能充分、实时、主动检测外来黑客入侵的问题,文中提出了基于渗透测试的网络安全评估技术。该方法通过建立网络安全评估模型,将该模型应用于系统中各部件的风险性评估中,并将评估系统中的各个功能模块和所述关系进行规划设计,使该系统能够自动对入侵者进行探测与漏洞预估,且通过系统设计实现了该渗透系统中的端口扫描、系统探测、漏洞捕获等主要功能。通过对具体实例的测试分析表明,该系统具有较强的实用性和有效性,能够保证未来互联网系统更加安全可靠,防止信息被窃取。Aiming at the problem that traditional network security protection system can’t detect external hacker in real time and actively,this paper proposes a network security evaluation technology based on penetration test. This method is through the establishment of network security evaluation model,the risk assessment model is applied to the system components,and will evaluate the planning and design of various functional modules of the system and the relationship,the system can automatically detect and exploit the invaders estimates,and through system design to achieve the main function of port scanning system,detection,capture the vulnerabilities in the system penetration. Through the test and analysis of specific examples,it shows that the system has strong practicability and effectiveness,which can ensure the future Internet system is more secure and reliable,and prevent information from being stolen.

关 键 词：渗透测试 网络安全评估 操作系统探测 端口扫描 漏洞检测 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]