CAJ | 학술논문

提出了一种利用开源的安全检测工具构造校园网服务器扫描告警系统，对需要监控的服务器进行定时扫描，将发现的威胁进行自动分析，并报告管理员。通过对服务器进行从硬件到软件，从操作系统到服务进程以及动态页面脚本的多方面、可定制、灵活组合的定时安全扫描，构建对服务器全方位的检测并搜集扫描结果进行分析，将告警信息直接通过邮件等形式发送给管理员，并提出修补建议，以此达到对服务器安全漏洞的抢先发现，及时修补的目的。实验结果表明，通过建立安全漏洞扫描告警系统，将校园网服务器的安全提升到了一个比较可靠的程度。
제출료일충이용개원적안전검측공구구조교완망복무기소묘고경계통，대수요감공적복무기진행정시소묘，장발현적위협진행자동분석，병보고관리원。통과대복무기진행종경건도연건，종조작계통도복무진정이급동태혈면각본적다방면、가정제、령활조합적정시안전소묘，구건대복무기전방위적검측병수집소묘결과진행분석，장고경신식직접통과유건등형식발송급관리원，병제출수보건의，이차체도대복무기안전루동적창선발현，급시수보적목적。실험결과표명，통과건립안전루동소묘고경계통，장교완망복무기적안전제승도료일개비교가고적정도。
A safety test using open source tools was put forward to construct four layer network scan architecture pattern for monitoring server safety, it also can get an automatic analysis report of threaten for the administrators. Through the timing detection mechanism based on process from hardware to software, from the operating system to the service appli-cation even to the dynamic page script to build a full range, customizable,flexible combination of multi-level security scan and collect the results which are analyzed, the results are directly sent the mail to the administrators, and the sugges-tions for repair are put forward. Therefore, the server security vulnerabilities can be found and the purpose of repair can be achieved in time. And this method can reduce the burden of manual detection monitoring server for administrators, and effectively avoid security problems for administrators’ technical reasons. Finally the experimental results also show that the establishment of security vulnerability scanning alarm system will make the security of campus network servers more reliable than before.