网络弱点分析系统研究与设计

The Research and Design of Analysis System of Network Vulnerability

本文针对当前网络弱点扫描系统的局限性,提出了在弱点扫描系统基础上引入弱点分析的观点。结合At tackTree、AttackNet等方法的优点,设计了一个合理的攻击描述模型,并应用于网络弱点扫描及分析系统,从而提高了它在安全评估领域的实用性。

Pointing to the limitation of the scan system of network vulnerability, this paper presents a point of view that vulnerability analysis is to be introduced on the basis of the vulnerability scan system. A rational described attack model,which combines the merits of Attack Tree and Attack Net is designed and applied to the scan and analysis system of network vulnerability, which will improve its practicability in the secure evaluation area.