网络安全脆弱性检测复合模型及应用

Research on network security vulnerability checking compound model and application

摘要:

介绍了对脆弱性检测的一般规则进行扩充而建立的脆弱性检测复合模型,并结合CVE实例,对复合模型的算法进行了研究。在对复合模型进行分解的基础上,对复合模型中的应用层和功能层分别进行插件化实现。应用证明,该方法大大提高了检测效率,并具有良好的可操作性和扩充能力。

Abstract:

The vulnerability checking compound model is introduced, which is established by extending the common vulnerability checking rules. Then the algorithm of compound model is studied by the aid of a CVE case. Based on disassemble of compound model, the application level and function level of compound model are implemented with plug-ins technique. The practice shows that the new methods can greatly raising the efficiency of vulnerability test, and have good operability and expendability.