计算机网络脆弱性分析方法初探

Discussion on Vulnerability Analysis Procedures of Computer Network

为加强计算机网络的安全管理和使用,减少被攻击和失泄密事件的发生,分别从系统自身脆弱性和外在威胁2个方面进行了系统分析,在此基础上提出了脆弱性分析准备、脆弱性识别和脆弱性排序等评估计算机网络脆弱性的方法步骤,提出了静态度量和动态度量2种度量网络脆弱性的方法,并就两2种方法进行了实验解析,为解决计算机网络脆弱性问题提供了一种量化手段。

In order to strengthen the safety management and application of computer network, reduce the occurrence of attacks and loss of leak, this paper performs system analysis for such two aspects as vulnerability and external threat respectively. Based on the analysis, it proposes the procedures of evaluating the vullnerability of computer network from analysis readiness, identification and ordering of vulnerability. The two procedures of measuring network vulnerability are presented, such as static measurement and dynamic measurement. The experiment results show that the two procedures can provide a quantization means for vulnerability analysis of computer network.