| 摘 要: 伴随着日益复杂多样化的网络攻击工具和手法的出现，传统的网络攻击检测方法已经无法满足当前网络 攻击检测的要求，网络协议漏洞分析测试平台应运而生，但是就目前的情况来说，现有的网络协议漏洞分析平台出现速 度缓慢滞后，难以快速发现零日漏洞攻击以及难以进行防御和修复等缺点。基于上述原因，本文提出的网络协议漏洞分 析测试平台主要由虚拟化测试云子平台、数据分析子平台、自动化漏洞测试子平台和Fuzzing测试子平台组成，经测试 该平台可以支撑用户实现一系列标准化安全检测与分析服务。 |
| 关键词: 网络协议；漏洞分析；测试平台；Fuzzing测试子平台 |
|
中图分类号: TP311.1
文献标识码: A
|
|
| The Construction of an Analysis and Testing Platform for Network Protocol Vulnerability |
|
ZHANG Yuehong
|
( Shanghai Technical Institute of Electronics& Information, Shanghai 201411, China)
|
| Abstract: With the emergence of increasingly complex and diverse network attack tools and techniques,the traditional network attack detection methods have been unable to meet the requirements of the current network attack detection. Therefore,the analysis and testing platforms for network protocol vulnerability arise at this historic moment.However,as far as the current situation is concerned,the speed of the existing network protocol vulnerability analysis platform is slow,and it is difficult to quickly find zero-day vulnerability attacks,and is also hard to defense and fix them.Based on the above reasons,the analysis and testing platform for network protocol vulnerability proposed in this paper is mainly composed of virtualization testing cloud sub-platform,data analysis sub-platform,automated vulnerability testing sub-platform and Fuzzing testing sub-platform.After testing,the platform can support users to implement a series of standardized security detection and analysis services. |
| Keywords: network protocol;vulnerability analysis;testing platform;Fuzzing testing sub-platform |
