网络安全漏洞扫描与脆弱性分析是进行系统安全评估的基础和信息安全保障体系中的必要组成部分。
Network security leak scan and vulnerability analysis are the base of system security evaluation and the essential components of Information security system.
首先，要对系统漏洞、潜在的攻击者及攻击目的、可能导致的后果等进行安全风险分析评估。
First of all, it is necessary to analyze and evaluate the security risk of the system vulnerabilities, the potential attackers and the purpose of the attack, and the possible consequences.
网络安全评价是一复杂的系统工程，现有的安全评估工具大都只是用于对网络系统安全漏洞进行扫描、检测。
Network security assessment is a complex system engineering. Most of current security evaluation tools are only used to scan and detect the security vulnerabilities of network system.
传统信息系统安全风险评估从系统运行维护环境出发，分析其漏洞和威胁。
Traditional risk assessment of information system security goes from the environment of system operating and preservation, analyzing its loopholes and threats.
当前，最常用的网络安全评价方法是风险评估方法，以及利用漏洞扫描工具软件来测试和评估系统的安全程度等。
At present, the most frequently used network security evaluating methods are risk evaluating method and leak scanning tool software to test and evaluate the security degree of the system.
本文概述了目前的安全漏洞评估研究现状，并介绍了通用漏洞评分系统(CVSS)。
This paper summarizes the current studies about the security vulnerability evaluation and introduces the Common vulnerability Scoring System (CVSS).
利用漏洞扫描器及入侵检测系统的统计结果两方面信息 ，提出了应用模糊信息融合对安全漏洞进行定性评估的方法 。
This paper made use of statistical results of vulnerability scanner and intrusion detection systems and presented method of qualitative evaluation of security vulnerability based on fuzzy data fusion.
利用漏洞扫描器及入侵检测系统的统计结果两方面信息 ，提出了应用模糊信息融合对安全漏洞进行定性评估的方法 。
This paper made use of statistical results of vulnerability scanner and intrusion detection systems and presented method of qualitative evaluation of security vulnerability based on fuzzy data fusion.
应用推荐