基于SCAP的Linux终端配置核查  

Linux Terminal Configuration Verification Based on SCAP

作　　者：王璇文 张署翔 WANG Xuan-Wen;ZHANG Shu-Xiang(A Support Brigade of the Navy Staff,Beijing100071,China)

机构地区：[1]海军参谋部某保障大队,北京100071

出　　处：《机电产品开发与创新》2020年第3期66-69,共4页Development & Innovation of Machinery & Electrical Products

摘　　要：本文以Linux操作系统为研究对象,旨在于提出一套基于SCAP(Security Content Automation Protocol:安全内容自动化协议)的Linux操作系统安全配置自动化核查解决方案。文章重点对SCAP协议以及该协议框架下的OVAL(Open Vulnerability and Assessment Language:开放式漏洞与评估语言)进行了介绍。其次,研究分析了相关开源的SCAP编辑和扫描工具的工作原理和使用方法。最后,以检测"设置密码最大重试次数为3"为例,进行了基于SCAP的Linux终端配置核查实践。This article takes the Linux operating system as the research object,and aims to propose a set of SCAP(Security Content Automation Protocol)security configuration automation verification solutions for the Linux operating system.The article focuses on the SCAP protocol and OVAL(Open Vulnerability and Assessment Language)under the framework of the protocol.Secondly,research and analyze the working principles and usage methods of the relevant open source SCAP editing and scanning tools.Finally,taking the example of"setting the maximum number of password retry attempts as 3"as an example,a Linux terminal configuration verification practice based on SCAP is carried out.

关 键 词：SCAP LINUX 配置 合规 OVAL ESCAPE oscap 

分 类 号：TP30[自动化与计算机技术—计算机系统结构]