Abstract:The network security situation of campus networks on CERNET (China Education and Research Network) has received great concern. However, most network managers have no complete picture of the network security because of its special management and the rapid growth of network assets. In this investigation, the security of campus networks belonging to seven universities in Wuhan was investigated. A tool called “WebHunt” was designed for campus networks, and with its help, the network security risks were found. Differently from existing tools for network probing, WebHunt can adopt the network scale and special rules of the campus network. According to the characteristics of campus websites, a series of functions were integrated into WebHunt, including reverse resolution of domain names, active network detection and fingerprint identification for software assets. Besides, WebHunt builds its vulnerability intelligence database with a knowledge graph structure and locates the vulnerabilities through matching knowledge graph information. Security assessments of seven universities presents WebHunt’s applicability for campus networks. Besides, it also shows that many security risks are concealed in campus networks, such as non-compliance IP addresses and domain names, system vulnerabilities and so on. The security reports containing risks have been sent to the relevant universities, and positive feedback was received.

Architecture of Multi-Dimension Web Application Security Based on OWASP and WASC

Research on security extensions based on Java 2 security architecture

Design of campus comprehensive access management platform

Construction of security architecture of web services based EAI

Design and Application Research on Management Information System Security Architecture in Digital Campus

A Design of Secure Community Healthcare Monitoring System Based on Wireless Sensor Networks

A Campus Network Security Solution Based on Six-layer Security Architecture

Design and implementation of a web application vulnerability detection system

Multi-Tier Security Feature Modeling for Service-Oriented Application Integration

Study and Implementation of a Software Development Pattern for Online Transient Security Early Warning and Protecting System

Study on Network Security Architecture for Power Systems

Design and Implementation of Information Security System in E-Campus

Design and Applying of Web Application Security Detecting System

A Framework and It's Application for Security Architecture of Computer Networks

Assessing the Security of Campus Networks: The Case of Seven Universities

Towards a Layered Architectural View for Security Analysis in SCADA Systems

Integrative Security Management for Web-Based Enterprise Applications

Research on Multidimensional Information Security Assessment Based on Big Data

Research on the Security Defense Architecture of the Closed-source Power Industrial Control System

Research on Information Security Architecture of Digital Examinations Authority

The problems in campus network information security and its solutions