节点文献
基于特权提升的多维量化属性弱点分类法的研究
Research on privilege-escalating based vulnerability taxonomy with multidimensional quantitative attribute
【摘要】 在分析国际上典型的弱点分类方法的基础上,提出了一种基于特权提升的多维量化属性的弱点分类法,并以三个弱点为例,分析了该弱点分类法的特点,给出了弱点的风险评估算式以及风险评估级的划分。
【Abstract】 On the basis of analyzing of research achievements of typical vulnerability taxonomies in the world, a privilege-escalating based vulnerability taxonomy with multidimensional quantitative attribute is presented in this paper. Then we give examples of three vulnerabilities to illustrate the characteristics of this taxonomy, and present the risk evaluation formula and ranks of the evaluation level of risk.
【关键词】 网络安全;
计算机弱点;
弱点分类;
特权提升;
风险评估;
【Key words】 network security; computer vulnerability; vulnerability taxonomy; privilege escalation; risk evaluation;
【Key words】 network security; computer vulnerability; vulnerability taxonomy; privilege escalation; risk evaluation;
【基金】 国防“十五”预研基金资助项目(413150701)
- 【文献出处】 通信学报 ,Journal of China Institute of Communications , 编辑部邮箱 ,2004年07期
- 【分类号】TP393
- 【被引频次】84
- 【下载频次】401