Abstract:Many security problems are caused by vulnerabilities hidden in enterprise computer networks. It is very important for system administrators to have knowledge about the security vulnerabilities. However, current vulnerability assessment methods may encounter the issues of high false positive rates, long computational time, and requirement of developing attack codes. Moreover, they are only capable of locating individual vulnerabilities on a single host without considering correlated effect of these vulnerabilities on a host or a section of network with the vulnerabilities possibly distributed among different hosts. To address these issues, an active vulnerability assessment system NetScope with C/S architecture is developed for evaluating computer network security based on open vulnerability assessment language instead of simulating attacks. The vulnerabilities and known attacks with their prerequisites and consequences are modeled based on predicate logic theory and are correlated so as to automatically construct potential attack paths with strong operation power of relational database management system. The testing results from a series of experiments show that this system has the advantages of a low false positive rate, short running periods, and little impact on the performance of audited systems and good scalability. The security vulnerabilities, undetectable if assessed individually in a network, are discovered without the need to simulate attacks. It is shown that the NetScope system is well suited for vulnerability assessment of large-scale computer networks such as campus networks and enterprise networks. Moreover, it can also be easily integrated with other security tools based on relational databases.

A New Database Security Scan System

New Database Security Auditing System

Research on Information Security Model and Security System Design

Design and Implementation of Lock Management System in Engineering Database

Research and development on data quality assessment management system

Survey of Security in Database

Design and Implementation of Code Security Inspection System Based on SVN

Design and implementation of a web application vulnerability detection system

Web Vulnerability Scanning Software

Progress of Cryptographic Access Control and Encryption Security Database

Building a Highly Available and Intrusion Tolerant Database Security and Protection System (DSPS)

Design and Development of a Defense-in-Depth Model for Database Security

Design and Application of a Software in Medical Equipment Detecting and Risk Assessment

The Security System Analysis of Teaching and Researching Management System Based on Audit Strategy

Computer Network Information Security Monitoring System Based on Big Data Era

DBMS Security Independence Test Framework Design and Implementation

An OVAL-based Active Vulnerability Assessment System for Enterprise Computer Networks.

New Method for Detecting Code Security Vulnerability Based on Reverse Deduction with Proof-Tree

Design of Intelligent Software Security System Based on Spark Big Data Computing

Research on Automatic Scanning Method of Network Vulnerabilities in Power System

SECURITY DESIGN OF NETWORK BASED TEST SYSTEM