计算机主机及网络脆弱性量化评估研究

在计算机网络安全领域，针对计算机主机及网络的脆弱性量化评估是目前的研究热点。本文提出了一种网络脆弱性量化评估方法，并在该评估方法的基础上开发出了相应的评估系统。系统通过对主机漏洞存在可能性以及漏洞利用可能性进行量化评估，得到目标主机的脆弱性度量值。在此基础上，结合网络拓扑结构，利用优化的最短路径算法，分析网络中存在的危险路径和关键结点，从而可以有针对性地进行网络脆弱性修补，增强网络的总体安全性能。

The Research of Quantitative Vulnerability Assessment of Computer Host and Network

In the field of network security,the research of quantitative vulnerability assessment of computer host and network is becoming highlighting.This paper brings forward a method of network-vulnerability quantitative assess- ment,and a corresponding system,based on this method,is established closely after that.In order to obtain the vul- nerability measurement of target host,the possibility of the existence and the exploitability of vulnerability are evalua- ted quantitatively in the system.On the basis of that,by combining with network topology,the dangerous path and critical node of network are analyzed in terms of the refined shortest-path algorithms.Thereby,the administrator can patch the vulnerability with a definite purpose,and which undoubtedly would enhance the general security performance of the network.