基于漏洞关联性分析的医院网络主动防御系统设计  

Design of Hospital Network Active Defense System Based on Vulnerability Correlation Analysis

作　　者：杜菁[1] DU Jing(Tianjin Hospital,Tianjin 300211 China)

机构地区：[1]天津市天津医院,天津300211

出　　处：《自动化技术与应用》2024年第11期177-181,共5页Techniques of Automation and Applications

基　　金：天津市自然科学基金生物医学工程项目(10JCYBJC10901)。

摘　　要：现有的主动防御系统在防御过程中存在不均衡性、资源浪费的情况,导致防御系统模拟主机运行程序的时间过长,设计一种基于漏洞关联性分析的医院网络主动防御系统。硬件设计中,使用多个功能服务器作为捕获工具获取攻击行为,减少开销;软件设计中,利用Netfilter数据包跟踪收集漏洞并获取相关参数,使用DS2算法对网络中的攻击进行识别与分类,完成医院网络的主动防御。系统性能测试结果表明:设计系统能有效缩短各程序实际运行时间,与基准值相比,主机A和主机B分别缩短了运行总时间的31.26%和38.64%。The existing active defense system has imbalance and waste of resources in the defense process,which leads to the long time of the defense system simulating the host running program.A hospital network active defense system based on vulnerability correlation analysis is designed.In the hardware design,multiple functional servers are used as capture tools to obtain attack behaviors to reduce overhead,in the software design,Netfilter packet tracking is used to collect vulnerabilities and obtain relevant parameters,and the DS2 algorithm is used to identify and classify attacks in the network.Active defense of the network.The system performance test results show that the designed system can effectively shorten the actual running time of each program.Compared with the benchmark value,host A and host B shorten the total running time by 31.26%and 38.64%respectively.

关 键 词：漏洞关联性分析 网络主动防御 Netfilter跟踪 DS2算法 

分 类 号：TP393.081[自动化与计算机技术—计算机应用技术]