| 兼容OVAL的多平台VAS设计与实现 |
| |
| 引用本文： | 王旭冬,高岭,张林. 兼容OVAL的多平台VAS设计与实现[J]. 计算机工程与应用, 2009, 45(36): 82-85. DOI: 10.3778/j.issn.1002-8331.2009.36.024 |
| |
| 作者姓名： | 王旭冬 高岭 张林 |
| |
| 作者单位： | 西北大学,信息科学与技术学院,西安,710127;西北大学,信息科学与技术学院,西安,710127;西北大学,信息科学与技术学院,西安,710127 |
| |
| 基金项目： | 国家科技支撑计划项目,陕西省自然科学基金 |
| |
| 摘 要： | 针对不同厂商安全软件之间的信息表示格式差异带来的软件联动问题,以及一个网络内通常存在多种平台主机的现状,提出一种“管理者/代理”架构的、兼容OVAL的多平台VAS（弱点评估系统）。系统以OVAL作为弱点评估标准,以轻量级Web server为通讯手段,支持多平台主机弱点评估,在保证评估高精度的同时,支持与OVAL兼容的其他安全软件共享安全数据,具有更高的评估完备性和功能扩展性。
|
| 关 键 词： | 联动 多平台 弱点评估系统 开放弱点评估语言 |
| 收稿时间： | 2008-12-26 |
| 修稿时间： | 2009-3-5 |
Design and implementation of OVAL-compatible VAS on multi-platform |
| |
| WANG Xu-dong,GAO Ling,ZHANG Lin. Design and implementation of OVAL-compatible VAS on multi-platform[J]. Computer Engineering and Applications, 2009, 45(36): 82-85. DOI: 10.3778/j.issn.1002-8331.2009.36.024 |
| |
| Authors: | WANG Xu-dong GAO Ling ZHANG Lin |
| |
| Affiliation: | Department of Information Science and Technology,Northwest University,Xi’an 710127,China |
| |
| Abstract: | Aiming at the flaws of current interoperability problem brought by different information expressing standards between different security products and present situation that a network generally includes several kinds of platforms,a design of manager/agent architecture-based,OVAL-compatible multi-platform Vulnerability Assessment System（VAS） is given.This system takes OVAL as vulnerability assessment standard and takes lightweight Web server as communicating measure.It supports multi-platform vulnerability assessment and sharing security data with other OVAL-compatible tools with high accuracy,assessing completeness and functional expansibility. |
| |
| Keywords: | interoperability multi-platform Vulnerability Assessment System (VAS) Open Vulnerability and Assessment Language (OVAL) |
| 本文献已被 维普 万方数据 等数据库收录！ |
| 点击此处可从《计算机工程与应用》浏览原始摘要信息 |
|
点击此处可从《计算机工程与应用》下载免费的PDF全文 |
|
