| 一种基于脆弱点依赖图的脆弱性评估方法 |
| |
| 引用本文： | 马俊春,孙继银,王勇军,李琳琳.一种基于脆弱点依赖图的脆弱性评估方法[J].大连海事大学学报(自然科学版),2010(4). |
| |
| 作者姓名： | 马俊春 孙继银 王勇军 李琳琳 |
| |
| 作者单位： | 第二炮兵工程学院402室;国防科技大学计算机学院; |
| |
| 基金项目： | 国家高技术研究发展计划(863)资助项目(2009AA01Z432) |
| |
| 摘 要： | 为弥补目前网络脆弱性评估系统比较简单、评估结果不全面不准确的不足,提出一种基于脆弱点依赖图的网络脆弱性评估方法,并在该评估方法基础上开发出相应的评估系统.该方法吸收了通用弱点评价体系(CVSS)的优势,同时与目标网络的脆弱点依赖图很好地结合起来,可对网络脆弱性做出一个客观评价.在计算过程中,该方法将脆弱性可利用性和脆弱性影响分开计算,并与实际目标网络中的脆弱点依赖图相结合,从而使得计算值更有参考和实用价值.
|
| 关 键 词： | 计算机网络 脆弱点依赖图 通用弱点评价体系(CVSS) |
A vulnerability assessing method based on vulnerability dependence graph |
| |
| MA Junchun,SUN Jiyin,WANG Yongjun,LI Linlin.A vulnerability assessing method based on vulnerability dependence graph[J].Journal of Dalian Maritime University,2010(4). |
| |
| Authors: | MA Junchun SUN Jiyin WANG Yongjun LI Linlin |
| |
| Institution: | MA Junchun1,2,SUN Jiyin1,WANG Yongjun2,LI Linlin1(1.402 Staff,The Second Artillery Engineering Institute,Xi'an 710025,China,2.School of Computer Science,National University of Defense Technology,Changsha 410073,China) |
| |
| Abstract: | To make up the deficiencies of the network vulnerability assessing system which was quite simple and had incomprehensive and inaccurate assessing result,a network vulnerability assessing method based on vulnerability dependence graph was presented,and the corresponding assessing system was developed.The method absorbs the superiority of common vulnerability scoring system(CVSS) and well combines with vulnerability dependence graph of goal network,which can make an impersonal and quantitative evaluation roun... |
| |
| Keywords: | computer network vulnerability dependence graph common vulnerability scoring system(CVSS) |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
|
