...
  • 主题
高级搜索  >
历史搜索 清空历史
首页> 外文期刊>Communications surveys & tutorials >Taxonomies of attacks and vulnerabilities in computer systems
【24h】

Taxonomies of attacks and vulnerabilities in computer systems

机译：计算机系统中攻击和漏洞的分类法

获取原文
获取原文并翻译 | 示例
   

获取外文期刊封面封底 >>

       
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Security assessment of a system is a difficult problem. Most of the current efforts in security assessment involve searching for known vulnerabilities. Finding unknown vulnerabilities still largely remains a subjective process. The process can be improved by understanding the characteristics and nature of known vulnerabilities. The knowledge thus gained can be organized into a suitable taxonomy, which can then be used as a framework for systematically examining new systems for similar but as yet unknown vulnerabilities. There have been many attempts at producing such taxonomies. This article provides a comprehensive survey of the important work done on developing taxonomies of attacks and vulnerabilities in computer systems. This survey covers work done in security related taxonomies from 1974 until 2006. Apart from providing a state-of-the-art survey of taxonomies, we also analyze their effectiveness for use in a security assessment process. Finally, we summarize the important properties of various taxonomies to provide a framework for organizing information about known attacks and vulnerabilities into a taxonomy that would benefit the security assessment process.
机译：系统的安全评估是一个难题。当前在安全评估中的大多数工作都涉及搜索已知漏洞。查找未知漏洞仍然很大程度上仍然是一个主观过程。通过了解已知漏洞的特征和性质，可以改进该过程。这样获得的知识可以组织成适当的分类法，然后用作系统地检查新系统的相似但尚未发现的漏洞的框架。已经进行了许多尝试来产生这种分类法。本文对在开发计算机系统中的攻击和漏洞分类法方面所做的重要工作进行了全面调查。该调查涵盖了从1974年到2006年在安全相关分类法中所做的工作。除了提供最新的分类法调查之外，我们还分析了它们在安全评估过程中的有效性。最后，我们总结了各种分类法的重要属性，以提供一个框架，用于将有关已知攻击和漏洞的信息组织到分类法中，这将有益于安全评估过程。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号