摘要: 漏洞的发现、利用和防御是网络攻防的焦点。通过对计算机漏洞的分类研究,有助于增强人们对漏洞本质的理解以及针对性地消除漏洞,特别是对发现未知漏洞具有积极作用。该文首先介绍计算机漏洞研究的现状,然后分析漏洞的概念、研究方法及分类模型,最后讨论漏洞研究存在的问题和发展趋势。
关键词:
计算机漏洞,
分类模型,
弱点,
逻辑错误
Abstract: Network attack and defense are focused on how to discover, exploit and prevent computer vulnerabilities. The taxonomy of computer vulnerabilities can result in an increased understanding of the nature of software vulnerabilities, which contributes to eliminating them respectively and is of great benefit to finding unknown vulnerabilities. In this thesis, the history and status quo of vulnerability studies are first reviewed. After that, the paper presents the concept, research method and taxonomy model of vulnerability. Finally, it discusses the problems and future trend in the studies of computer vulnerabilities.
中图分类号:
单国栋,戴英侠,王航. 计算机漏洞分类研究[J]. , 2002, 28(10): 11-14.
SHAN Guodong,DAI Yingxia,WANG Hang. Study on Computer Vulnerability Taxonomy[J]. , 2002, 28(10): 11-14.