内网安全检测与分析技术研究

现有的网络安全防护手段缺乏对内网主机的安全管理。本文分析了来自内网的主要安全威胁,实现了一个内网安全检测工具,结合该检测工具以及漏洞扫描的结果,给出了一个分析内网安全性的逻辑模型。该模型能综合考虑内网中不符合规定的主机、主机的漏洞、主机间的逻辑关系以及内网的边界防护规则等因素,对内网主机的安全性分析更合理。

On the Detection and Analysis Techniques of the Intranet Security

The current network protection methods are ineffective in controlling the hosts of the Intranet.This paper analyzes the threats coming from the Intranet,implements an Intranet security detection system.Then based on the results of this system and those of the scanners,it constructs a logical model to evaluate the security of an intranet.By integrating the factors of the hosts which are not consistent with the rules,the vulnerabilities,the logical relations among hosts,and the boundary defense rules,this model provides a more reasonable evaluation to the Intranet.