计算机漏洞分类研究  

Study on Computer Vulnerability Taxonomy

作　　者：单国栋[1] 戴英侠[1] 王航[1] 

机构地区：[1]中国科技大学研究生院信息安全国家重点实验室,北京100039

出　　处：《计算机工程》2002年第10期3-6,共4页Computer Engineering

基　　金：国家重点基础研究发展规划项目;项目编号:G1999035801;国家自然科学基金;项目编号:90104030

摘　　要：漏洞的发现、利用和防御是网络攻防的焦点。通过对计算机漏洞的分类研究，有助于增强人们对漏洞本质的理解以及针对性地消除漏洞，特别是对发现未知漏洞具有积极作用。该文首先介绍计算机漏洞研究的现状，然后分析漏洞的概念、研究方法及分类模型，最后讨论漏洞研究存在的问题和发展趋势。Network attack and defense are focused on how to discover, exploit and prevent computer vulnerabilities. The taxonomy of computer vulnerabilities can result in an increased understanding of the nature of software vulnerabilities, which contributes to eliminating them respectively and is of great benefit to finding unknown vulnerabilities. In this thesis, the history and status quo of vulnerability studies are first reviewed. After that, the paper presents the concept, research method and taxonomy model of vulnerability. Finally, it discusses the problems and future trend in the studies of computer vulnerabilities.

关 键 词：计算机漏洞 分类模型 逻辑错误 漏洞分类 计算机安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]