信息安全漏洞分类研究

详细信息

Classification research on information security vulnerabilities

Institute of Computing Technologies, China Academy of Railway Sciences, Beijing 100081, China

摘要: 信息安全漏洞是造成信息安全问题的重要原因之一,是实施网络攻防的关键要素,如何及时有效发现漏洞信息,减少对社会、国家信息安全的不利影响,对安全漏洞的研究成为信息安全领域的重点,漏洞分类研究是漏洞研究的基础。本文简要介绍及总结国内外关于安全漏洞的定义和分类,并对未来的安全漏洞分类工作进行了展望。
- 信息安全 /
- 安全漏洞 /
- 漏洞分类
Abstract: Information security vulnerability was one of the important causes of information security problems and the key factor to implement network attack and defense. How to find vulnerabilities information and reduce the adverse impact on the society and the national information security, the research on vulnerability became the focus of information security domain, and the classification of vulnerability was the basis of vulnerability research. This paper briefly introduced and summarized the definition and classification of security vulnerabilities at home and abroad, and also prospected the future security vulnerabilities classification work.
- information security /
- security vulnerabilities /
- vulnerabilities classification

[1]	. Denning D. Cryptography and Data Security[M]. Reading, MA, USA: Addison-Wesley, 1982.
[2]	.Longley D, Shain M, Caell W. Information Security: Dictionary of Concepts, Standards and Terms[M]. New York, USA: MacMil-lan, 1992.
[3]	Bishop M, Bailey D. A Critical Analysis of Vulnerability Taxo-nomies, Technical Report CSE-96-11[R]. Davis, USA: Depart-ment of Computer Science at the University of California at Davis, 1996.
[4]	吴世忠. 信息安全漏洞分析回顾与展望[J]. 清华大学学报（自然科学版）,2009（S2）.

1.	曹婉莹，曹旭栋，葛平原，张玉清. 中美网络安全漏洞披露与共享政策研究. 信息安全研究. 2023(06): 602-608 . 百度学术
2.	兰昆，朱治丞，张宇光. 定量和定性相结合的物联网漏洞分类方法研究. 通信技术. 2020(02): 461-468 . 百度学术
3.	祝咏升，陈春雷. 铁路网络安全威胁及漏洞管理平台研究. 铁路计算机应用. 2020(08): 61-65 . 本站查看
4.	王鹏，李秀芬，韩俊飞. 电力信息网络系统漏洞扫描分析. 内蒙古电力技术. 2019(02): 33-35 . 百度学术
5.	侯婧媖，彭骏驰. 地市公司信息安全隐患整治常态机制研究. 电力信息与通信技术. 2017(02): 49-53 . 百度学术
6.	高健. 基于网络漏洞分析的安全设备部署设计研究. 网络安全技术与应用. 2017(04): 37+43 . 百度学术