漏洞扫描与入侵检测联动系统的研究*

提出漏洞扫描与入侵检测系统联动工作模型.通过定期对系统进行漏洞扫描,及时修补系统安全漏洞,同时IDS根据漏洞扫描结果,对模式库进行动态更新,删除和得到与修补的漏洞有关的攻击模式,缩减模式库的规模,从而可以有效地提高IDS检测效率.根据该模型,系统采用开放接口方式实现双方联动,使用基于插件的开放式模块化方法编程,以提高系统的可扩展性.

Study of Interaction with Vulnerability Scanner and Intrusion Detection System

The paper provided a new model,the interaction with vulnerability scanner and Intrusion Detection System(IDS).The system was scanned by the vulnerability scanner in regular time and patched the vulnerabilities in time,according to the results of the vulnerability scanner,the IDS deleted the attack patterns related with this patch in pattern library,it decreased the size of pattern library,improved the efficiency of the IDS prominently.Based on this model,the paper proposed to implemented the interaction by using open interfaces,and implement the system by using the technology of plug-in to improve its extensibility.