校园网补丁升级与漏洞扫描方案的研究

本文以某单位校园网为研究对象,针对现阶段校园网主要面临的蠕虫泛滥的问题,在相关理论研究的基础上结合校园网的三期安全改造工程进行了安全方案的研究.本文设计了将计费网关与漏洞扫描及流量监测技术相结合的方案,解决了校园网客户端用户主机补丁包升级、校园网客户端主机漏洞扫描、漏洞主机提示以及暂时中止中毒主机访问互联网等问题,收到了较好的效果.本研究对于其他中型规模的校园网络或企业网络具有一定的参考价值.

The study in updating patch of operation system and scanning leak on campus network

The paper focuses on the improvement of the security of the campus network in an Institute.Based on the analyses of the situation of the present campus network as well as the related theories,a security scheme is researched and designed both from the theoretical and practical perspectives in combination with the three-phase security improvement project in the campus network.In the paper,the writer proposes adding a charging gateway in combination with leak scanning and net flow monitoring technology.The scheme intends to solve the problems in several aspects: patching operation system,scanning serious leak,promoting computers that have serious leaks,and fighting against worms.It is able to suspend the internet-visiting qualification on computers which have been infected by worms until such worms are cleared.It is able to notify the users who have some serious leaks in their operation systems or have not patched their operation systems in time in login page of the charging gateway,enjoying better effects and having some referencing value to other middle-scale campus networks or enterprise networks.