CAJ | 학술논문

为了解决目前主流的漏洞检测工具计算成本高、网络负载高、影响应用系统运行的问题,提出了基于演化的漏洞判定算法,基于演化的漏洞检测框架及其原型系统.该系统在传统的漏洞检测中引入计算机免疫理论,通过对计算机演化的监控来实现漏洞检测.该系统以订阅者/发布者分布式结构组织,订阅者负责收集其系统特征,发布者负责检测漏洞.实验测试结果表明,与其他的漏洞检测工具相比,其具备检测速度快,对网络运行影响小,对应用系统影响小的特点,适用于大规模计算网络.
위료해결목전주류적루동검측공구계산성본고、망락부재고、영향응용계통운행적문제,제출료기우연화적루동판정산법,기우연화적루동검측광가급기원형계통.해계통재전통적루동검측중인입계산궤면역이론,통과대계산궤연화적감공래실현루동검측.해계통이정열자/발포자분포식결구조직,정열자부책수집기계통특정,발포자부책검측루동.실험측시결과표명,여기타적루동검측공구상비,기구비검측속도쾌,대망락운행영향소,대응용계통영향소적특점,괄용우대규모계산망락.
The high cost of computing and network resources brought by existing mainstream vulnerability detection tools affect the running of application systems seriously. To reduce the computing cost and waste of network resources, the algorithm, framework and prototype system of evolution-based vulnerability detection was proposed here. The system improved the traditional vulnerability detection performance with introduction of computer immune theories, detected vulnerabilities by monitoring evaluation of computer systems. Components of the system were organized to comply with the subscriber/publisher architecture, the subscriber was responsible for system characteristics collection and the publisher was responsible for vulnerability detection. Experimental results demonstrate that compared with other vulnerability detection tools, the system is more efficiency, lower computing and network resources required,less affection on applications and applicable to large-scale computing network.