1. 东北大学计算机科学与工程学院,辽宁,沈阳,110819
2. 西安电子科技大学计算机科学与技术学院,陕西,西安,710071
3. 东北大学计算机科学与工程学院,辽宁,沈阳,110819
4. 西安电子科技大学计算机科学与技术学院,陕西,西安,710071
网络出版:2019-11-25,
纸质出版:2019
移动端阅览
姚茗亮, 鲁宁, 白撰彦, 等. 面向网络资产漏洞评估的设备指纹搜索引擎构建方法[J]. 电子学报, 2019,47(11):2354-2358.
YAO Ming-liang, LU Ning, BAI Zhuan-yan, et al. Construction Method of Device Fingerprinting Search Engine for Network Asset Vulnerability Assessment[J]. Acta Electronica Sinica, 2019, 47(11): 2354-2358.
姚茗亮, 鲁宁, 白撰彦, 等. 面向网络资产漏洞评估的设备指纹搜索引擎构建方法[J]. 电子学报, 2019,47(11):2354-2358. DOI: 10.3969/j.issn.0372-2112.2019.11.017.
YAO Ming-liang, LU Ning, BAI Zhuan-yan, et al. Construction Method of Device Fingerprinting Search Engine for Network Asset Vulnerability Assessment[J]. Acta Electronica Sinica, 2019, 47(11): 2354-2358. DOI: 10.3969/j.issn.0372-2112.2019.11.017.
网络资产漏洞评估技术对于梳理互联网资产、实现网络资产漏洞安全管理起到十分重要的作用.已有方法因无法有效获取设备指纹信息而产生评估结果准确度低、功能单一等问题.为此,本文提出一种面向网络资产漏洞评估的设备指纹搜索引擎构建方法,具有多接口、交互性强、减少网络冗余探测的优势.本文通过统计和评估真实网络中的服务器类型、HTTPS协议漏洞来验证方法的高效性.
The network asset vulnerability assessment technology plays an important role in sorting out Internet assets and realizing the security management of network asset vulnerabilities. The existing methods have the issues such as low accuracy of evaluation results and single function due to the inability to effectively obtain the fingerprinting information of the device. Therefore
this paper proposes a construction method of device fingerprinting search engine for network asset vulnerability assessment
which has the advantages of multiple interfaces
strong interactivity
and reduced network redundancy detection. This paper verifies the efficiency of the method by counting and evaluating server types and HTTPS protocol vulnerabilities in real networks.
0
浏览量
137
下载量
0
CSCD
关联资源
相关文章
相关作者
相关机构
京公网安备11010802024621