网络脆弱性分析方法的研究

摘要

网络脆弱性分析是网络安全分析和风险评估的重要组成部分。网络脆弱性分析方法的发展经历了从人工分析到自动分析的阶段，在自动化分析阶段，基于网络扫描的脆弱性分析发展得到了很大的进步。为了方便网络脆弱性的分析，提出了基于模型的分析方法，提出的各种基于模型的脆弱性分析方法从不同的角度入手，具有各自的优势。为了全面、准确地分析目标网络，必须考虑整个系统作为一个动态和分布式的特点，基于模型的分析方法可以分析整个网络，并可以利用强大的数学工具。%Vulnerability analysis of network is an important part of network security analysis and risk assessment. Vulnerability analysis of network has experienced the stage from the manual to the automatic. In the automatic analysis stage,the scan-based vulnerability analysis methods have been well advanced. In order to be convenient for vulnerability analysis of network,the model-based analysis has been pro-posed. Many model-based vulnerability analysis methods start with different angles and have respective advantages. To make the result comprehensive and accurate,the target of analysis must be considered as a whole system with dynamic and distributed features. Model-based methods can analyse a whole network,and can use powerful mathematic tools.