通信学报

• • 上一篇    下一篇

校园网服务器安全扫描告警系统的设计与实现

庞 滨,李 华,王友义,闫 帅,杨智和   

  1. 1. 内蒙古大学 网络信息中心,内蒙古 呼和浩特 010021;2. 内蒙古大学 计算机学院,内蒙古 呼和浩特 010021
  • 出版日期:2014-10-25 发布日期:2014-12-16
  • 基金资助:
    国家自然科学基金资助项目(61163011);内蒙古自然科学基金项目(2012MS0922)

Design and implementation of server security alarm system in campus network

  • Online:2014-10-25 Published:2014-12-16

摘要: 提出了一种利用开源的安全检测工具构造校园网服务器扫描告警系统,对需要监控的服务器进行定时扫描,将发现的威胁进行自动分析,并报告管理员。通过对服务器进行从硬件到软件,从操作系统到服务进程以及动态页面脚本的多方面、可定制、灵活组合的定时安全扫描,构建对服务器全方位的检测并搜集扫描结果进行分析,将告警信息直接通过邮件等形式发送给管理员,并提出修补建议,以此达到对服务器安全漏洞的抢先发现,及时修补的目的。实验结果表明,通过建立安全漏洞扫描告警系统,将校园网服务器的安全提升到了一个比较可靠的程度。

Abstract: A safety test using open source tools was put forward to construct four layer network scan architecture pattern for monitoring server safety, it also can get an automatic analysis report of threaten for the administrators. Through the timing detection mechanism based on process from hardware to software, from the operating system to the service application even to the dynamic page script to build a full range, customizable,flexible combination of multi-level security scan and collect the results which are analyzed, the results are directly sent the mail to the administrators, and the suggestions for repair are put forward. Therefore, the server security vulnerabilities can be found and the purpose of repair can be achieved in time. And this method can reduce the burden of manual detection monitoring server for administrators, and effectively avoid security problems for administrators’ technical reasons. Finally the experimental results also show that the establishment of security vulnerability scanning alarm system will make the security of campus network servers more reliable than before.

No Suggested Reading articles found!