摘要： 对目前的软件脆弱性分类方法进行了分析,说明了软件脆弱性的研究现状,提出了引入原因、所在部件、影响、修复、验证、检测和攻击等描述软件脆弱性的关键属性,针对Unix/Linux操作系统,提出了基于软件脆弱性所在部件和引入原因的二维度的脆弱性分类法, 对分类法属性的选择进行了说明,详细描述了分类方法,并对设计脆弱性进行了重点说明。

关键词: 脆弱性, 分类法, 属性

Abstract: This paper analyzes the current taxonomies of software vulnerability, describes the actualities of research on software vulnerability, proposes the key attributes used to describe a software vulnerability which includes cause, location, impact, mend, validation, detection and attack, and then for Unix/Linux operating systems, proposes two-dimensional taxonomy of software vulnerability based on location and cause attributes, analyses the choice reason of taxonomic attributes, and describes in detail the classification scheme with emphasis on the class of design vulnerability.

中图分类号: 

• TP393