基于CVE的安全脆弱性数据库系统的扩展设计

针对现有脆弱性数据库存在的不足．文章通过引入CVE的数据兼容机制．按照管理脆弱性数据和服务安全工具并重的原则，提出并扩展设计了一类通用性更好的安全脆弱性数据库系统．可以支持集脆弱性探测、漏洞存储、安全评估于一体的多项应用。此外．对其管理维护和应用访问接口进行了讨论．最后给出了该库在已实现的分布式脆弱性扫描系统和安全评估系统中的具体应用．

Extended Design of a CVE Based on Security Vulnerability Database System

According to the defect of current vulnerability databases, an extended design of more universal security vulnerability database system is proposed and given with the principle of both managing vulnerability data and serving security tools, which is CVE-compatible and can be used to support vulnerability detection, storing weakness, security evaluation and so on. The management and API of the system are also discussed, and finally its actual application is presented in the realized distributed vulnerability scanner system and security evaluation system.