基于网络的漏洞扫描系统毕业论文编程频道|福州电脑网

2024年4月16日发(作者：)

百度文库 - 让每个人平等地提升自我

本科毕

业论文

基于网络的漏洞扫描系统

Vulnerability Scan System Based on Network

姓名：

学号：

学院：软件学院

系：软件工程

专业：软件工程

年级：

指导教师：

年月

摘要

随着互联网的日益普及，网络的安全问题越来越成为人们关注的焦点之一。

而在所有安全事件中，99%的网络入侵都是基于已知的漏洞而产生的，因此检测

并修补已知的安全漏洞对保证网络的安全起着非常重要的意义。

基于网络的漏洞扫描系统是一种主动式的安全检测系统。它能够根据漏洞

百度文库 - 让每个人平等地提升自我

库中不同漏洞的特征，模拟黑客攻击的方式，向本地或远程主机发送一个或多

个经过特殊构造的数据包，捕获并记录目标主机发回的应答数据包。通过这种

方法，收集到目标主机的各种信息，并将这些信息与已有漏洞的特征进行匹配，

从而发现目标主机上的各种安全漏洞。

本文首先介绍了课题研究的背景和意义，以及安全漏洞的概念、产生的原

因，并对几种常见的漏洞进行了分析。接下来研究了安全漏洞扫描中使用的一

些关键技术，例如协议栈指纹识别技术、ICMP扫描技术、TCP扫描技术等，并

在此基础上设计和实现了一个基于网络的漏洞扫描系统。

该系统首先检测目标主机的存活状况，然后对远程主机操作系统版本进行

识别，紧接着扫描该主机所开放的服务端口，在得到这些信息的基础上对目标

可能存在的已知安全漏洞进行逐项检测，发现目标系统中存在的漏洞。在扫描

结束时，给出扫描报告，从而让管理员及时发现当前网络中的安全隐患，修补

系统中的漏洞，提高网络的安全性与抵御攻击的能力。

关键词：漏洞；网络安全；漏洞扫描

Abstract

With the increasing popularity of the Internet, network security is drawing more

and more people's attention. For all the security incidents, 99% of the network

instrusions are based on the known vulnerabilities, so it is significant for network

security that the known vulnerabilities should be detected and repaired.

百度文库 - 让每个人平等地提升自我

Vulnerability Scan System Based on Network is a type of active security

detection system. It can immatate the way of hackers' attacking to send one or more

specially constructed data packets accourding to the feaures of different vulnerability,

and then capture and record the echoing packets from target host. By this way, the

information of target host is collected, then system compares them with the features

of existing vulnerabilities, thus vulnerabilities of the target host will be found out.

This article firstly introduces the background and significance of the research,

and the definition of vulnerability, the cause of the vulnerability as well as the

analysis of several common type of vulnerabilities. Then some key technologies are

studiedy such as identification of protocol stack, ICMP scaning technology, TCP

scaning technology, etc,based on which a system called "Vulnerability Scan System

Based on Network" is designed and implemented.

The system firstly detect the liveness of the target host, then its operation

system version is detected, and next, the opening service ports is scaned, after the

collection of these information, the system will check the host's vulnerabilities one

by one, find its existing vulnerabilities. After the scaning, a report is given which

allows the administrator to find network sercurity vulnerabilities in time and fix

them, which will rise the security level and the ability to defense network attacking.

Key words: vulnerability; network security; vulnerabilities scan.

研究背景 ................................................................................................................................... 2

漏洞扫描技术的现状 ............................................................................................................... 2

本文的内容及安排 ................................................................................................................... 3

相关理论介绍 ........................................................................................................................... 5

2.1.1 漏洞概念 ............................................................................................................... 5

2.1.2 漏洞成因 ............................................................................................................... 6

百度文库 - 让每个人平等地提升自我

2.1.3 常见漏洞类型 ....................................................................................................... 8

相关技术介绍 ........................................................................................................................... 9

2.2.1 Winsock与原始套接字 ........................................................................................ 9

2.2.2 操作系统嗅探技术 ............................................................................................. 11

2.2.3 ICMP扫描技术 .................................................................................................... 12

2.2.4 TCP扫描技术 ...................................................................................................... 14

开发环境简介 ......................................................................................................................... 18

本章小结 ................................................................................................................................. 18

第三章系统分析与设计 ............................................................................................................... 19

整体设计 ................................................................................................................................. 19

3.1.1设计目标 .............................................................................................................. 19

3.1.2系统结构 .............................................................................................................. 19

3.1.3数据库设计 .......................................................................................................... 21

功能模块设计 ......................................................................................................................... 22

3.2.1存活主机检测 ...................................................................................................... 22

3.2.2操作系统嗅探 ...................................................................................................... 23

3.2.3端口扫描 .............................................................................................................. 24

3.2.4漏洞扫描 .............................................................................................................. 24

本章小结 ................................................................................................................................. 26

第四章系统实现 ........................................................................................................................... 27

存活主机检测模块的实现 ..................................................................................................... 27

端口扫描模块实现 ................................................................................................................. 28

本章小结 ................................................................................................................................. 32

演示环境 ................................................................................................................................. 33

演示结果 ................................................................................................................................. 33

5.2.1 主机检测 ............................................................................................................. 34

5.2.2 操作系统嗅探 ..................................................................................................... 34

5.2.3 端口探测 ............................................................................................................. 34

5.2.4 漏洞扫描 ............................................................................................................. 36

本章小结 ................................................................................................................................. 36

第六章总结与展望 ....................................................................................................................... 37

总结 ......................................................................................................................................... 37

展望 ......................................................................................................................................... 37

百度文库 - 让每个人平等地提升自我

Content