网络漏洞扫描工具核验方法研究  

Research on verification methods of network vulnerability scanning tools

作　　者：刘烨 潘科羽 吕唯因 刘锐奇 马远伟 孙智权 Liu Ye;Pan Keyu;Lyu Weiyin;Liu Ruiqi;Ma Yuanwei;Sun Zhiquan(CEPREI,Guangzhou 510370,China)

机构地区：[1]工业和信息化部电子第五研究所,广州510370

出　　处：《现代计算机》2024年第14期65-69,79,共6页Modern Computer

基　　金：广东省重点研发计划项目(2020B1111410002)。

摘　　要：随着互联网的迅猛发展,网络安全已经成为国家安全的重要组成部分。网络漏洞扫描工具作为一种高效、便捷的网络安全检测评估工具,在网络安全检测评估机构中得到广泛应用。然而,网络漏洞扫描工具在使用过程中也存在一些潜在风险和安全隐患。为了确保工具的安全性和可靠性,从功能适用性、兼容性、性能效率、结果准确性等方面提出了详细的核验内容和方法,并分享了开源漏洞扫描工具的核验案例。通过对网络漏洞扫描工具进行全面、系统的核验,可以有效地评估其风险和适用性,确保其在实际应用中的安全性和可靠性。With the rapid development of the Internet,network security has become an important part of national security.The network vulnerability scanning tool,as an efficient and convenient tool for network security detection and evaluation,has been widely used in network security detection and evaluation institutions.However,there are also some potential risks and security risks in the use of network vulnerability scanning tools.In order to ensure the security and reliability of the tool,detailed verifica‑tion content and methods were proposed from the aspects of functional applicability,compatibility,performance efficiency,and re‑sult accuracy,and verification cases of open‑source vulnerability scanning tools were shared.By conducting comprehensive and sys‑tematic verification of network vulnerability scanning tools,their risks and applicability can be effectively evaluated,ensuring their security and reliability in practical applications.

关 键 词：网络安全检测评估机构 网络漏洞扫描工具 工具核验 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]