

浏览全部资源
扫码关注微信
1. 东北大学计算机科学与工程学院,辽宁,沈阳,110819
2. 西安电子科技大学计算机科学与技术学院,陕西,西安,710071
3. 东北大学计算机科学与工程学院,辽宁,沈阳,110819
4. 西安电子科技大学计算机科学与技术学院,陕西,西安,710071
Published Online:25 November 2019,
Published:2019
移动端阅览
YAO Ming-liang, LU Ning, BAI Zhuan-yan, et al. Construction Method of Device Fingerprinting Search Engine for Network Asset Vulnerability Assessment[J]. Acta Electronica Sinica, 2019, 47(11): 2354-2358.
YAO Ming-liang, LU Ning, BAI Zhuan-yan, et al. Construction Method of Device Fingerprinting Search Engine for Network Asset Vulnerability Assessment[J]. Acta Electronica Sinica, 2019, 47(11): 2354-2358. DOI: 10.3969/j.issn.0372-2112.2019.11.017.
网络资产漏洞评估技术对于梳理互联网资产、实现网络资产漏洞安全管理起到十分重要的作用.已有方法因无法有效获取设备指纹信息而产生评估结果准确度低、功能单一等问题.为此,本文提出一种面向网络资产漏洞评估的设备指纹搜索引擎构建方法,具有多接口、交互性强、减少网络冗余探测的优势.本文通过统计和评估真实网络中的服务器类型、HTTPS协议漏洞来验证方法的高效性.
The network asset vulnerability assessment technology plays an important role in sorting out Internet assets and realizing the security management of network asset vulnerabilities. The existing methods have the issues such as low accuracy of evaluation results and single function due to the inability to effectively obtain the fingerprinting information of the device. Therefore
this paper proposes a construction method of device fingerprinting search engine for network asset vulnerability assessment
which has the advantages of multiple interfaces
strong interactivity
and reduced network redundancy detection. This paper verifies the efficiency of the method by counting and evaluating server types and HTTPS protocol vulnerabilities in real networks.
0
Views
137
下载量
0
CSCD
Publicity Resources
Related Articles
Related Author
Related Institution
京公网安备11010802024621