A Host Deployed Vulnerability Assessment System Based On OVAL

摘要：

Vulnerability is a weakness which allow attacker to reduce a systems information assurance. Many security problems are caused by vulnerabilities. Part of them can be identified and assessed in virtue of vulnerability assessment tools. However, current vulnerability assessments involve in some drawbacks, such as high false positive rate, long assessing time and requirement of attack codes. Aiming at the problems above, we proposed a vulnerability assessment system based on OVAL (Open Vulnerability Assessment Language). And we optimize the assess method of OVAL definitions. Compared with traditional assessment system, and proved by our experiments it is of high accuracy, low assessing time as a result of host-deployed and OVAL.

关键词： network security vulnerability assessment open vulnerability assessment language

作者: Jiong Zheng Xiao-song Zhang Xiao-hui Pan

作者单位: School of Computer Science & Engineering University of Electronic Science and Technology of China Chengdu 611731, China

会议类型: 国际会议

会议名称: The 2010 International Conference on Computer Application and System Modeling(2010计算机应用与系统建模国际会议 ICCASM 2010)

会议地点: 太原

会议语种:英文

页码: 123-126

在线出版日期: 2010-10-22（万方平台首次上网日期，不代表论文的发表时间）