摘要
通过对国内外现有的脆弱性评估系统的研究,综合了基于网络和基于主机的两种扫描系统的优点,提出一种改进架构的网络安全评估系统(Improved Network Security Assessm ent System,INSAS)。本系统旨在探测已知的安全漏洞,对网络主机的安全等进行有效的检查。通过实验室内网段上的扫描实验表明了INSAS在运行效率和对网络带宽的影响上,均优于现有的扫描系统。
Based on the research of domestic and foreign vulnerability assessment systems, in this paper , we propose an improved network security assessment system (INSAS). It integrates the advantages of both host based and network based scan system. Our goal is to explore the known security vulnerabilities,and to check hosts' security effectively as well . The result of scanning experiment in lab shows superiorities of INSAS in operation efficiency and fewer impacts on network bandwidth.
出处
《南京邮电大学学报(自然科学版)》
EI
2006年第3期27-32,共6页
Journal of Nanjing University of Posts and Telecommunications:Natural Science Edition
关键词
网络安全
脆弱性扫描
插件技术
Network security
Vulnerability scan
Plug-in technique