• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>Recent advances in communications, circuits and technological innovation >Risk Evaluation by Vulnerability Detection Tools for IT Department of the Royal Thai Army
【24h】

Risk Evaluation by Vulnerability Detection Tools for IT Department of the Royal Thai Army

机译：泰国皇家陆军IT部门通过漏洞检测工具进行的风险评估

获取原文
获取原文并翻译 | 示例
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Security is always a main concern in any organization networks. Securitytest is an important step to ensure that the organization network isregularly inspected and well prevented from attackers. However, audit and analysis are not only time-consuming procedure but also depended to human expertise. Automatic vulnerability detection ispreferred asa proactive tool for security professionals to identify vulnerabilities before an adversary can exploit them. Typically, there are two types of vulnerability detection tools: Hardware Appliances and Software Applications.However, vulnerability detection tools have some important weaknesses. They only identify surface vulnerabilities and are unable to address the overall risk level of the scanned network. Network risks arebasically divided into 4 levels. Nevertheless, they often use different standard for risk level classification whichhabitually related to some organizations or vendors. Henceforth, this paper presents "Network Risk Metric" as an unbiased risk evaluation from several vulnerability detection tools. In this paper, NetClarity (hardware-based) and Nessus (software-based) are implemented on two networks from an IT department of the Royal Thai Army (RTA). Then, the proposed metric is applied for evaluating overall network risk from both vulnerability detection tools.
机译：安全始终是任何组织网络中的主要关注点。安全测试是确保定期检查组织网络并防止其受到攻击者的重要步骤。但是，审计和分析不仅是耗时的过程，而且还取决于人类的专业知识。自动漏洞检测是安全专业人员在攻击者利用漏洞之前识别漏洞的一种主动工具。通常，漏洞检测工具有两种类型：硬件设备和软件应用程序。但是，漏洞检测工具有一些重要的弱点。它们仅识别表面漏洞，无法解决被扫描网络的总体风险级别。网络风险基本上分为四个级别。但是，他们经常使用不同的风险等级分类标准，这些标准通常与某些组织或供应商有关。此后，本文将“网络风险指标”作为几种漏洞检测工具的公正评估。在本文中，NetClarity（基于硬件）和Nessus（基于软件）是在泰国皇家陆军（RTA）的IT部门的两个网络上实现的。然后，将所提出的度量标准用于评估来自两个漏洞检测工具的整体网络风险。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号