Research on the Essential Network Equipment Risk Assessment Methodology based on Vulnerability Scanning Technology

In this paper, we conduct research on the essential network equipment risk assessment method based on vulnerability scanning technology. A growing number of hackers wanton invasion of the computer, through the network to steal important information, or destroy the network, the paralyzed which caused huge losses to the state and society. Find a known vulnerability rather than to find the unknown vulnerabilities much easier, which means that most of the attacker＇ s use is common vulnerabilities. Therefore, we adopt the advantages of the technique to finalize the methodology for the essential network equipment risk assessment which will be meaningful.

DAVS:Dockerfile Analysis for Container Image Vulnerability Scanning

Container technology plays an essential role in many Information and Communications Technology(ICT)systems.However,containers face a diversity of threats caused by vulnerable packages within container images.Previous vulnerability scanning solutions for container images are inadequate.These solutions entirely depend on the information extracted from package managers.As a result,packages installed directly from the source code compilation,or packages downloaded from the repository,etc.,are ignored.We introduce DAVS–A Dockerfile analysis-based vulnerability scanning framework for OCI-based container images to deal with the limitations of existing solutions.DAVS performs static analysis using file extraction based on Dockerfile information to obtain the list of Potentially Vulnerable Files(PVFs).The PVFs are then scanned to figure out the vulnerabilities in the target container image.The experimental shows the outperform of DAVS on detecting Common Vulnerabilities and Exposures(CVE)of 10 known vulnerable images compared to Clair–the most popular container image scanning project.Moreover,DAVS found that 68%of real-world container images are vulnerable from different image registries.

Programmable Adaptive Security Scanning for Networked Microgrids

Communication-dependent and software-based distributed energy resources(DERs)are extensively integrated into modern microgrids,providing extensive benefits such as increased distributed controllability,scalability,and observability.However,malicious cyber-attackers can exploit various potential vulnerabilities.In this study,a programmable adaptive security scanning(PASS)approach is presented to protect DER inverters against various power-bot attacks.Specifically,three different types of attacks,namely controller manipulation,replay,and injection attacks,are considered.This approach employs both software-defined networking technique and a novel coordinated detection method capable of enabling programmable and scalable networked microgrids(NMs)in an ultra-resilient,time-saving,and autonomous manner.The coordinated detection method efficiently identifies the location and type of power-bot attacks without disrupting normal NM operations.Extensive simulation results validate the efficacy and practicality of the PASS for securing NMs.

Design & Test of an Advanced Web Security Analysis Tool (AWSAT)

Considering the escalating frequency and sophistication of cyber threats targeting web applications, this paper proposes the development of an automated web security analysis tool to address the accessibility gap for non-security professionals. This paper presents the design and implementation of an automated web security analysis tool, AWSAT, aimed at enabling individuals with limited security expertise to effectively assess and mitigate vulnerabilities in web applications. Leveraging advanced scanning techniques, the tool identifies common threats such as Cross-Site Scripting (XSS), SQL Injection, and Cross-Site Request Forgery (CSRF), providing detailed reports with actionable insights. By integrating sample payloads and reference study links, the tool facilitates informed decision-making in enhancing the security posture of web applications. Through its user-friendly interface and robust functionality, the tool aims to democratize web security practices, empowering a wider audience to proactively safeguard against cyber threats.

Security of Computer Network and Measures of Defense

Along with the deepening of the reform and opening-up policy and the entering of the WTO,international exchange of economy and culture has become more and more frequent,Internet has become an indispensable part of our life,its rapid development brings great convenience to us,and all of the computers will be connected by Internet in the 21 century,thus the meaning of information security has changed substantially.It not only changes from a general guarding to a common defence,but from a specific field to a public subject as well.However,the opening and sharing of the Internet resource,unefficient supervision as well as various virus make people's information and belongings being in an extremely dangerous environment.The fight between hackers and anti-hackers,destruction and anti-destruction has already affected the stable running of the network and users' legal right,caused great economy damages and it could also threat our country's security.So a right understanding and in-time measures should be paid special attention to.The thesis firstly expatiates the current state of the network security and its importance,and discusses some major factors and threats that affect the network security.And the thesis also introduce some catalogues of the security techniques,some relevant information and their major characters,besides that,I enumerate some popular and effective methods of protecting our network,including the widely used firewall,and the meticulous techniques such as security scan techniques and techniques of intrusion detection.Lastly,some protective measures are stated.

An Adaptive Algorithm to Detect Port Scans

Detection of port scan is an important component in a network intrusion detection and prevention system. Traditional statistical methods can be easily evaded by stealthy scans and are prone to DoS attacks. This paper presents a new mechanism termed PSD(port scan detection), which is based on TCP packet anomaly evaluation. By learning the port distribution and flags of TCP packets arriving at the protected hosts, PSD can compute the anomaly score of each packet and effectively detect port scans including slow scans and stealthy scans. Experiments show that PSD has high detection accuracy and low detection latency.

校园网络安全风险评估方法研究与应用

随着高校网络规模的迅速扩张、用户数量的增长以及网络开放性的提升,校园网络作为提供多元化信息服务的平台,面临的安全挑战也日益凸显。根据校园的实际情况,综合运用多种风险评估方法进行系统的风险评估,包括流程图法、危害性分析方法、分解分析法、调查列举法等。针对校园网络安全风险评估的特性,提出基于探测技术的安全风险评估方法,对校园网络中不同类型安全风险进行识别和探测,能够有效获取资产的基础属性信息,并且通过实验验证该方法的可行性和实用性。

Fast Multi-Pattern Matching Algorithm on Compressed Network Traffic

Pattern matching is a fundamental approach to detect malicious behaviors and information over Internet, which has been gradually used in high-speed network traffic analysis. However, there is a performance bottleneck for multi-pattern matching on online compressed network traffic(CNT), this is because malicious and intrusion codes are often embedded into compressed network traffic. In this paper, we propose an online fast and multi-pattern matching algorithm on compressed network traffic(FMMCN). FMMCN employs two types of jumping, i.e. jumping during sliding window and a string jump scanning strategy to skip unnecessary compressed bytes. Moreover, FMMCN has the ability to efficiently process multiple large volume of networks such as HTTP traffic, vehicles traffic, and other Internet-based services. The experimental results show that FMMCN can ignore more than 89.5% of bytes, and its maximum speed reaches 176.470MB/s in a midrange switches device, which is faster than the current fastest algorithm ACCH by almost 73.15 MB/s.

DevSecOps中软件安全性测试技术综述

软件安全性测试技术是互联网时代软件开发商完善软件性能和抵御网络攻击的重要手段,而将安全性(Security)融入开发(Development)和运维(Operations)过程中的理念DevSecOps作为新一代软件开发模式,能够识别软件可能存在的威胁和有效评估软件安全性,可将软件安全风险置于可控范围内。于是,以DevOps(Development and Operations)流程为研究起点,梳理DevOps软件开发模式各阶段涉及的软件安全性测试技术,包括源代码审计、模糊测试、漏洞扫描、渗透测试和安全众测技术;收集和分析SCI、EI、SCOPUS、CNKI、CSCD和万方等知名索引库中近三年的相关文献资料,归纳总结以上技术的研究现状,并给出相关测试工具的使用建议;同时针对各技术支撑手段的优缺点,对软件开发模式DevSecOps的未来发展方向进行了展望。

对铁路综合视频监控安全防护的思考

对铁路综合视频监控系统安全平台的防护功能进行简要说明,对其中存在的漏洞扫描、终端管控、网络配置核查等方面存在的典型问题进行探讨;针对这些问题,提出相应的解决方法或思路建议,其中重点讨论漏洞扫描的维护周期与实现方法、终端管控功能需求的主要内容、网络配置核查的注意事项和特点等;最后对视频安全平台在铁路综合视频监控系统中的发展前景进行简要说明。

网络安全漏洞扫描与修复自动化技术研究

网络安全漏洞频发,对企业和个人构成了严重威胁。传统的人工扫描和修复方式效率低下,难以应对日益复杂的网络环境。对此,研究一种网络安全漏洞扫描与修复自动化技术,通过漏洞知识库、智能扫描引擎和自动化修复工具的有机结合,实现高效、精准、全面的漏洞发现和修复。实验结果表明,该技术可以显著加快漏洞响应速度,减少95%的人工投入,修复成功率达到98.7%,对于提高网络安全防护水平具有重要意义。

电力系统的安全漏洞扫描与网络防护策略

电力系统的安全问题会直接影响电力供应的稳定性。为应对不断变化的网络威胁,采用机器学习算法,设计了一种智能化的电力系统网络漏洞扫描方法。该方法可实时监控网络流量,动态检测未知漏洞,显著提高了漏洞检出率,同时降低了误报率;此外,通过与安全防护策略的紧密整合,显著缩短了漏洞响应时间,为维护电力系统安全技术的发展提供了重要支持。

网络漏洞扫描工具核验方法研究

随着互联网的迅猛发展,网络安全已经成为国家安全的重要组成部分。网络漏洞扫描工具作为一种高效、便捷的网络安全检测评估工具,在网络安全检测评估机构中得到广泛应用。然而,网络漏洞扫描工具在使用过程中也存在一些潜在风险和安全隐患。为了确保工具的安全性和可靠性,从功能适用性、兼容性、性能效率、结果准确性等方面提出了详细的核验内容和方法,并分享了开源漏洞扫描工具的核验案例。通过对网络漏洞扫描工具进行全面、系统的核验,可以有效地评估其风险和适用性,确保其在实际应用中的安全性和可靠性。

大数据与计算机网络的安全技术分析

阐述基于大数据的计算机网络安全问题,大数据与计算机网络安全防护技术,包括加密技术、预警技术、漏洞扫描技术,以及信息加密与恢复技术。探讨重新规划安全维护结构,设置效率更高的配套方案,以及设计缜密的管理制度,创建安全配置体系,从而使计算机网络安全技术能够更好地发挥防御作用。

分布式端口扫描器Dnmap的设计与实现

nmap事实上成为现代各种扫描器技术上的标杆,但随着近年网络环境发生重大变化,它很容易被发现和拦截。需要对其进行分布式升级,以提高其隐蔽性和运行效率。分布式的dnmap保留了单机的nmap原有各种特点,同时把单个任务分布式化,基于多个设备或多个独立IP实施,在分布式的设备和独立IP地址足够多的前提下,可以减少扫描时间,并且不容易被发现和拦截。dnamp采用Master、Slave双角色的模式,进行分布式部署,将其应用于正面的网络攻防演练,有利于打造更安全稳定的网络环境。

配电站房扫码门禁系统设计与应用

传统的配电站房门禁系统智能化程度低、操作繁琐、安全性差,无法满足供电所智能化的应用需求,而且普通的智能门禁设备无法适应配电站房高温、潮湿的恶劣环境。针对上述问题,设计了一种基于扫码开门方式的配电站房门禁系统。该系统在原门禁硬件中嵌入舵机和继电器,并进行通信模块集成研制、远程控制协议设计以及移动应用软件研发。同时,该系统提供了丰富的接口,以快速实现与供服系统、工单管理等其他业务系统的对接,可满足配电站房对门禁系统的智能化、多元化需求。该系统有效地解决了配电站房的出入管理不方便和存在安全隐患的问题,提升了配电网的安全管控效率。

网络安全扫描技术研究

给出了网络安全扫描技术的概念、分类，对其中的两种主要技术——端口扫描技术和漏洞扫描技术以及它们的原理分别进行了详细阐述，讨论了各类端口扫描技术及部分技术的实现，并针对它们的优缺点进行了比较，介绍了各种漏洞扫描技术的实现原理，指出了漏洞扫描中存在的一些问题并给出了一些完善化的建议。

基于插件的安全漏洞扫描系统设计

网络安全漏洞扫描应充分考虑执行效率和功能独立扩展问题。从网络攻击的角度提出一个系统安全漏洞的分类,阐述了一个实用的基于这些漏洞分类以及插件技术的网络安全漏洞扫描系统的设计。该系统采用C/S模型结构,服务器端的扫描程序以独立的插件形式执行,可方便地添加或删除,而客户端漏洞的扫描功能设置则基于漏洞的分类。系统采用证书认证机制来保障C/S交互的安全性。

基于UNIX主机系统的漏洞扫描器的设计

针对目前不断出现的网络安全问题,分析UNIX主机系统安全漏洞存在的必然性,提出基于UNIX主机系统的漏洞扫描器的设计思想.在此基础上设计了一个基于UNIX主机系统的漏洞扫描器,阐述其系统模型和工作原理.该扫描器可以从外部和内部对目标服务器进行扫描.实验表明,通过使用该扫描器,用户可以不留痕迹地发现一台本地或远程服务器的安全性弱点.

网络安全评估模型研究

针对网络安全技术的发展现状 ,阐述了对网络进行安全评估的重要意义 ,给出了基于插件技术的网络安全评估模型 .在此基础上 ,讨论了漏洞分类的主要方法、漏洞的标识原则以及漏洞库的更新问题 .结合插件技术的发展 ,给出了模拟攻击技术的插件实现以及相关插件更新机制 .最后 ,给出一个综合分析评估模型 。