摘要
在前期研究工作的基础上,将基于指数的微观分析和基于风险和的宏观分析相结合,提出了一种综合量化评估主流操作系统安全弱点的方法,并对Windows NT、Redhat Linux和Solaris等3大主流操作系统6个版本的1081个弱点实施了评估。该方法能够有效地分析各操作系统版本的演进对其安全性的影响,以及横向比较操作系统在不同层次、不同方面的安全状况。
On the basis of the previous research work, this paper combines the index-based micro-analysis with the risk sum based macro-analysis to propose an integrated method for quantitative assessment of mainstream operating systems＇ security vulnerabilities, and evaluates 1081 vulnerabilities related to six versions of three mainstream operating systems Windows NT, RedHat Linux and Solaris. This method can be used to effectively analyze the influences of the evolution of the operating systems on their security and compare the security status of the systems from various aspects on various levels.
出处
《高技术通讯》
CAS
CSCD
北大核心
2007年第4期331-336,共6页
Chinese High Technology Letters
基金
国家自然科学基金（60403033）、863计划（2001AA147010B）和国防十五预研（4131571）资助项目.
关键词
系统安全
弱点评估
量化评估
弱点关联
操作系统
system security, vulnerability assessment, quantitative evaluation, vulnerability correlation, operating system
