关键词: 网络安全, 漏洞扫描, 多维度信息收集, 分布式, Docker

Abstract:

The current frequent occurrence of cyberspace security incidents has resulted in huge losses to national security and the real economy, demonstrating that the information security threats confronting nations have transcended the traditional concept of invasion warfare. Therefore, network security vulnerability scanner is an important means to prevent network attacks. Vulnerability scanners currently on the market are usually designed using brute?force scanning, which has problems such as limited detection dimension, slow speed and low accuracy. This paper proposes a distributed multi?dimensional assessment and detection model using Docker technology for multi?node deployment and simultaneous information collection. It divides information into multiple dimensions and quantifies them. The model introduces a fuzzy hierarchical evaluation method to assess the vulnerability values of target systems, and enhances the attention to corresponding systems based on their vulnerability levels. It combines fingerprinting technology with vulnerability detection methods. Tests conducted using a scenario?based Combat Network Shooting Range (CFS) show a significant improvement in detection efficiency compared to commonly used enterprise?level network scanners, outperforming traditional one?dimensional vulnerability detection methods in terms of hit rate and efficiency.

Key words: Network security, Vulnerability scanning, Multi?dimensional information collection, Distributed, Docker