【作者】 张艳；

【导师】 唐屹；

【作者基本信息】 广州大学 ， 应用数学， 2010， 硕士

【摘要】 针对目前补丁的发布模式C/S,用户要完成软件更新,必须登录服务器进行补丁下载,这样会给服务器带来严重负荷。其次,C/S的补丁分发延迟时间长,容易使完成更新的攻击者对没打补丁的脆弱主机进行危害。因此,需要重新考虑可替代的补丁分发方案,加快补丁的分发速度,保证系统的安全。本文从软件补丁发布技术的角度出发,系统地讨论了计算机漏洞和补丁分发技术研究的现状,提出了一种高效的补丁分发策略,基于客户端的补丁多播技术(EHBM)。在用户完成补丁的下载以后,自愿从管理服务器接收转发补丁的地址列表,帮助服务器来完成补丁的分发。这是一种利用客户端充当服务器,帮助分发补丁的策略,它减轻了服务器的工作量,同时也提高了补丁发布的效率。然后,介绍了EHBM补丁分发系统的功能特点,并详细描述了该系统的设计与实现。最后,文章分析了新模式下补丁分发存在的安全问题,并给出了冗余度和结点可信度两种解决方案。更多还原

【Abstract】 With the current patch distribution scheme C/S, the user have to login on the update server to download the patch , which take the server serious load. And then, scheme C/S stagger patch distribution over long time periods, may allow attackers who receive the patch first to compromise the significant fraction of vulnerable hosts who have not yet received the patch. For this reason ,we need to rethink the alternative update-delivery strategies, to speed up the patch distribution ,and ensure the security of the system.From the point of the patch distribution , the paper discusses the vulnerability and the current status of patch distribution ,and proposed an effective distribution scheme ,the End-host based multicast (EHBM). Once the client downloaded the patches, will distribute the patches according to the address list ,which received from the management server. This is a strategy that the client help to release patches by playing the role of server. The scheme can reduce the workload of server , and improve the efficiency of patch distribution.Then,the function of EHBM patch distribution was introduced . The paper also describes the design and implementation of this system in detail. Finally, this paper analysed the security problem which may occur in the new patch distribution scheme ,and proposed two solution: Redundancy and the credibility of the node.更多还原