基于Masscan漏洞扫描技术的研究

发布时间：2018-01-14 01:32

本文关键词：基于Masscan漏洞扫描技术的研究　出处：《南开大学》2016年硕士论文　论文类型：学位论文

【摘要】：随着科学技术的快速发展,互联网极大的改善了人们的日常生活,但它也带来了诸多安全隐患。互联网安全管理人员为了确保网络系统的安全,及时防范由于安全漏洞被黑客利用所造成的损失,采取了诸多的安全保护措施。漏洞扫描便是其最为重要的方式之一。本文主要研究了多种端口扫描技术以及漏洞扫描技术,分析了当今较为普及的多种漏洞扫描器的底层实现方式、扫描原理以及漏洞扫描器的现状与发展趋势。本文分析了多款扫描器的架构对扫描效率的影响,并对有着极高扫描效率的Masscan扫描器做了深入的剖析。Masscan是当今扫描速度最快的端口扫描器,在业内有着极高的认可度,所以对Masscan的研究和优化具有很高的价值和现实意义。在研究中发现,虽然Masscan扫描效率在同类扫描器中很突出,但仍然可以在两个方面做优化:一是为了弥补Masscan漏洞扫描功能上的不足,本文实现了基于Masscan的插件式漏洞扫描系统;二是为了进一步提高它的扫描速度,本文实现了面向Masscan的分布式服务系统。论文的具体研究内容和创新点如下:1)论述了漏洞的基本概念以及漏洞对当今社会的危害,从多个角度对漏洞进行了技术性的分类。本文剖析了多款流行的端口扫描器以及漏洞扫描器的实现方式,并详细研究了Masscan扫描器的实现原理以及运行机制。2)针对Masscan只能对少许基本漏洞进行探测的局限性,设计并实现了一套插件式的Masscan漏洞扫描系统。该系统可根据研究需要通过修改插件数据对新的一个或多个漏洞进行扫描,从而扩展了其漏洞扫描的功能。3)针对Masscan在扫描大范围目标时的时间消耗大的问题,本文专门设计了一套针对Masscan的分布式服务系统——DisMass。DisMass通过控制中心/代理的方式,实现了Masscan的分布式漏洞扫描功能。
[Abstract]:With the rapid development of science and technology, the Internet has greatly improved people's daily life, but it also brings a lot of security risks. Internet security management personnel to ensure the security of network system, timely prevention due to security vulnerabilities exploited by hackers caused by the loss, take safety protection measures. Many vulnerability scanning is one of the most as one of the important way. This paper mainly studies the variety of the port scan and vulnerability scanning technology, analyzes the bottom more popular variety of scanner implementation, scanning principle and current situation and development trend of leakage hole scanner. This paper analyzes the impact of a variety of scanner architecture on the scanning efficiency, and has a Masscan scanner high scanning efficiency to do in-depth analysis of the.Masscan port scanner is today the fastest scanning, has a high recognition in the industry Can, so research and optimization of Masscan has very high value and practical significance. In the study found that although the Masscan scanning efficiency is very prominent in the same scanner, but can still be optimized in two aspects: one is to make up for the Masscan vulnerability scanning the foot, this paper implements a plug-in vulnerability scanning system based on Masscan; the two is to further improve its scanning speed, this paper implements a distributed service system based on Masscan. The main research contents of this paper are as follows: 1) discusses the basic concept of vulnerability to hazards and vulnerabilities in today's society, the classification of technical vulnerabilities from multiple this paper analyzes the implementation point of view. A variety of popular port scanner and scanner, and a detailed study of the principle and the operation mechanism of.2 Masscan scanner for Masscan only) A basic limitation of vulnerability detection, Masscan is designed and implemented a plug-in vulnerability scanning system. The system can according to the need of research by modifying the scan of one or more vulnerabilities new plug-in data, thus expanding the function of the.3 vulnerability scanning) big problem for Masscan in large scanning the range of target time consumption, this paper designed a set of Masscan for distributed service system DisMass.DisMass through the control center / agent mode, realize the distributed vulnerability scanning function of Masscan.

【学位授予单位】：南开大学
【学位级别】：硕士
【学位授予年份】：2016
【分类号】：TP393.08

【相似文献】