辽宁石油化工大学学报2025,Vol.45Issue(5):81-87,7.DOI:10.12422/j.issn.1672-6952.2025.05.010
基于Docker的多维度分布式漏洞扫描技术研究
Research on Multi-Dimensional Distributed Vulnerability Scanning Technology Based on Docker
摘要
Abstract
The current frequent occurrence of cyberspace security incidents has resulted in huge losses to national security and the real economy,demonstrating that the information security threats confronting nations have transcended the traditional concept of invasion warfare.Therefore,network security vulnerability scanner is an important means to prevent network attacks.Vulnerability scanners currently on the market are usually designed using brute-force scanning,which has problems such as limited detection dimension,slow speed and low accuracy.This paper proposes a distributed multi-dimensional assessment and detection model using Docker technology for multi-node deployment and simultaneous information collection.It divides information into multiple dimensions and quantifies them.The model introduces a fuzzy hierarchical evaluation method to assess the vulnerability values of target systems,and enhances the attention to corresponding systems based on their vulnerability levels.It combines fingerprinting technology with vulnerability detection methods.Tests conducted using a scenario-based Combat Network Shooting Range(CFS)show a significant improvement in detection efficiency compared to commonly used enterprise-level network scanners,outperforming traditional one-dimensional vulnerability detection methods in terms of hit rate and efficiency.关键词
网络安全/漏洞扫描/多维度信息收集/分布式/DockerKey words
Network security/Vulnerability scanning/Multi-dimensional information collection/Distributed/Docker分类
信息技术与安全科学引用本文复制引用
孔维立,曹杨,章聪,杨昌霖,孟德成..基于Docker的多维度分布式漏洞扫描技术研究[J].辽宁石油化工大学学报,2025,45(5):81-87,7.基金项目
辽宁省教育厅基本科研项目(LJKMZ20220754) (LJKMZ20220754)
全国大学生创新创业训练项目(202310148009). (202310148009)