电力企业网的安全漏洞状况及划分

The division of security vulnerability state in electric power enterprise network

在利用安全漏洞扫描工具对计算机系统进行扫描时,能够发现大量的安全漏洞,但是目前对漏洞严重性的划分没有和应用环境相结合,划分的也不够细致。分析了一个电力企业网内部安全漏洞的状况,提出了与应用环境相结合的漏洞严重性的划分方法。该方法使漏洞严重性划分得更加细致,从而使系统安全管理员可以在最短的时间内修补更严重的安全漏洞。

Security vulnerability scanning tools can find a large number of vulnerabilities in computer system, but the division of the severity of vulnerabilties has no relation with the application environment. This paper analyses the vulnerabilitiy state in electric power enterprise network and gives a method of division of severity of vulnerability, combining with the application environment. This method divides the vulnerability in detail, and helps system security administrators patch the vulnerabilities in the shortest time.