内网安全防护—补丁模块的设计与实现

发布时间：2018-02-27 11:33

本文关键词： 安全防护漏洞扫描补丁管理 Windows系统　出处：《西安电子科技大学》2014年硕士论文　论文类型：学位论文

【摘要】：随着网络技术的不断发展,计算机和网络更多的参与到了人们的生活和工作中。在计算机上的各种应用丰富人们的生活的同时,人们对于所使用的计算机的安全和保密要求也越来越高。在企业或单位建立起来的信息化网络环境中,或多或少的都会存在关于监管保护、自我防御等方面的问题。这些问题会导致网络环境中的用户信息面临严重的安全风险。随着网络攻击的复杂化和常态化,政府机关和科研院所的办公计算机终端发生泄密安全事件的风险加剧,与之而来的计算机终端安全问题显得越来越重要。在攻击的主要途径中,相当一部分是由于网络环境中的计算机的操作系统存在漏洞所致。本课题以中国科学院计算机终端安全检查系统项目为背景,为计算机终端用户提供全面的安全服务。整个平台的开发过程相对复杂,涉及到较多计算机技术,而本文的重点在于介绍安全防护中的一个重要环节——漏洞防护功能的实现。此功能主要是实现内部网络中的计算机及时安装系统补丁,降低漏洞被攻击者利用的风险。在整合现有技术的基础上,提高补丁管理措施,达到补丁管理的自动化需求。本文首先介绍了C/S构架的整个安全检查系统,主要是客户端和服务器端的整体构架及支撑平台。客户端的功能包括安全配置管理、补丁管理、终端状态收集、硬件信息查询、安装软件管理、进程流量监控和病毒木马查杀等模块。对服务器端的框架介绍包括双服务器系统的内部主要组件和组件之间的联系。其次介绍了客户端补丁模块的具体实现。客户端中的补丁模块主要是利用从服务器获取的补丁详细信息文件,按照扫描条件进行本地扫描,然后将扫描信息备份至服务器端,并进行补丁下载和安装。在对客户端实现过程中涉及到的技术进行简要介绍的基础上,详细说明了具体的实现接口。再次是对基于MVC框架进行设计的服务器端补丁模块每一层所要实现的具体工作进行了描述。数据移库功能的实现依赖于对微软补丁管理系统(WSUS)及其内部数据库(SUSDB)的理解,主要工作是分析了其中若干个重要表的具体内容。接着展示了如何在完成数据存储的基础上实现高危预警功能。最后,结合系统运行情况的观察以及对新技术的调研,对当前系统进行了总结与下一步技术路线的规划。
[Abstract]:With the continuous development of network technology, computers and networks are more involved in people's lives and work. All kinds of applications on computers enrich people's lives at the same time. The security and confidentiality requirements of the computers used by people are also increasingly high. In the information-based network environment established by enterprises or units, there will be more or less supervision and protection. Self-defense and other problems. These problems will lead to serious security risks for user information in the network environment. With the complexity and normalization of network attacks, The security problems of computer terminals in the offices of government organs and scientific research institutes are becoming more and more important because of the increased risk of leakage security incidents in the office computer terminals of government organs and scientific research institutes. Many of them are due to the existence of loopholes in the computer operating system in the network environment. This project is based on the computer Terminal Security Inspection system Project of the Chinese Academy of Sciences. The development process of the whole platform is relatively complex and involves more computer technology. The emphasis of this paper is to introduce the implementation of vulnerability protection, which is an important link in security protection. This function is mainly to realize the timely installation of system patches by computers in the internal network. To reduce the risk of vulnerability being exploited by attackers. On the basis of integrating existing technologies, we improve patch management measures to meet the automatic requirements of patch management. This paper first introduces the entire security inspection system based on C / S architecture. The functions of the client include security configuration management, patch management, terminal status collection, hardware information query, installation software management. Process traffic monitoring and virus Trojan detection and other modules. The server-side framework including the main components of the dual-server system and the relationship between the components. Secondly, the client patch module is introduced. The patch module on the home side mainly uses the patch details file obtained from the server. Local scan according to the scan criteria, then backup the scan information to the server, and carry out patch download and installation. On the basis of a brief introduction of the technology involved in the implementation of the client, The implementation of the server patch module based on the MVC framework is described in detail. The implementation of the data migration library function depends on the Microsoft patch. Management system (WSUSS) and its internal database (SUSDB), The main work is to analyze the concrete contents of some important tables. Then it shows how to realize the function of high risk early warning on the basis of data storage. Finally, combined with the observation of system operation and the investigation of new technology, The current system is summarized and the next technical route is planned.
【学位授予单位】：西安电子科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【相似文献】