Abstract:Many security problems are caused by vulnerabilities hidden in enterprise computer networks. It is very important for system administrators to have knowledge about the security vulnerabilities. However, current vulnerability assessment methods may encounter the issues of high false positive rates, long computational time, and requirement of developing attack codes. Moreover, they are only capable of locating individual vulnerabilities on a single host without considering correlated effect of these vulnerabilities on a host or a section of network with the vulnerabilities possibly distributed among different hosts. To address these issues, an active vulnerability assessment system NetScope with C/S architecture is developed for evaluating computer network security based on open vulnerability assessment language instead of simulating attacks. The vulnerabilities and known attacks with their prerequisites and consequences are modeled based on predicate logic theory and are correlated so as to automatically construct potential attack paths with strong operation power of relational database management system. The testing results from a series of experiments show that this system has the advantages of a low false positive rate, short running periods, and little impact on the performance of audited systems and good scalability. The security vulnerabilities, undetectable if assessed individually in a network, are discovered without the need to simulate attacks. It is shown that the NetScope system is well suited for vulnerability assessment of large-scale computer networks such as campus networks and enterprise networks. Moreover, it can also be easily integrated with other security tools based on relational databases.

Research on Computer Network Vulnerability Assessment Techniques

Computer Network System Security Assessment Method.

Computer Network Security System Research

Technical Research on Computer Network Security Automatic Evaluation

Computer Network Security and Technology Research

Network computer security hidden dangers and vulnerability mining technology

Computer Network Attack and Defense Technology

Research on the Main Threat and Prevention Technology of Computer Network Security

Vulnerability Assessment on WAMS Communication System Based on Attack Tree Model

Research on Network Security Technology

Research on Key Technologies of Network Security Multidimensional Dynamic Risk Assessment

Computer Network Security Technology Research

Research on Computer Network Security Analysis Modeling Based on Artificial Intelligence Technology

Research on Computer Network Risk Prevention and Control Technology in the Information Age

Analysis of Influencing Factors and Countermeasures of Computer Network Security

Research on Automatic Scanning Method of Network Vulnerabilities in Power System

An OVAL-based Active Vulnerability Assessment System for Enterprise Computer Networks.

Analysis of computer network security risk assessment methods

RESEARCH ON PROGRAM VULNERABILITIES ANALYSIS AND PROGRAM SECURITY PROTECTION TECHNOLOGIES

Research on the Architecture of Vulnerability Discovery Technology

Research on Network Security of Campus Network