【作者】 王维；

【导师】 余胜生；

【作者基本信息】 华中科技大学 ， 计算机系统结构， 2009， 硕士

【摘要】 安全扫描工具是提高计算机安全的主要工具之一。许多安全扫描工具是针对具体漏洞编写的程序,功能更新能力较差;综合性的安全扫描工具多由黑客编写,具有一定的攻击性,不符合普通用户和专业人员的需求,人们有必要设计自己的安全扫描工具。讨论安全扫描工具使用的端口扫描、操作系统识别和漏洞扫描等关键技术,给出安全扫描工具的总体结构模型,并对其进行功能模块的划分和设计。分析常用的端口扫描方法在SP2系统下受限制的原因,发现利用原始套接字传送数据包,操作系统返回错误信息,设计在数据链路层构建并传送数据包的方法绕过SP2对原始套接字发送操作的限制问题。在漏洞扫描模块中,采用动态库插件技术,定义编写插件的统一规范,导出相同的函数接口,实现安全扫描工具的功能更新;从系统类型和端口号两级设计扫描插件库的分类方法,将扫描插件库划分为若干个子插件库;分析现有扫描插件的管理和加载策略,利用操作系统识别和端口扫描模块的结果,有针对性的加载扫描插件,尽量减少插件的加载数量并保证漏洞扫描结果的完备性。实验结果证明在数据链路层传送数据包的方法是可行性,也验证了安全扫描工具的功能更新的简便性。更多还原

【Abstract】 Security scanning tool is one of the primary instruments to improve the security of computer system. At present, a number of the security scanning tools are specific procedures for the special vulnerability, poor functional capacity updated. Comprehensive security scanning tools are programs that are coded by hackers. However, they are unable to meet the needs of users and professionals. Therefore, it is necessary to design our own security scanning tools.This paper discusses the key technologies of security scanning tool such as port scanning, OS identification and vulnerability scanning. And next, gives the overall structure of the security scanner, divides and designs the functional modules. In addition, this thesis analyzes the restriction of port scanning in the SP2 system and finds that the use of raw socket to send packets is not permit, then, designs a packet transmission method in data link layer which passed the restriction in SP2 system. In the vulnerability scanning module, we adopt dynamic library plug-ins technologies to define standardization of the plug preparation and to export the same function interfaces and to achieve the functional updating of the security scanning tools. We can classify the scanning plug-ins into some parts based on system types and port types. It is easy to use in the next step. According to the result of the operation system identification and the port scanning module, we can analyze the strategy of the management and the load of plug-ins in the existing scanning tools. Next, designs a new strategy which can reduce the number of loading plug-ins and ensure the completeness of scanning result.Experimental results show that packet transmission method in the data link layer is feasible and the functional capacity updated is very easy too.更多还原