Study On Network Security Assessment

Recent year, the computer network is increasingly playing important role in politics, the economy, the military, the social life and so on each field, but because the network has the connection form multiplicity, openness,interconnection so on trait, attack affairs which aim at network system frequently occure and cause network security to become a important aspect which is not allowed to neglect in the network construction."What security affairs don't occur", this is ideal status of network security, but under actual condition of network, since network system exists vulnerabilities,although these vulnerabilities don't directly destroy network system, once these vulnerabilities are used by attackers who have bad behavior, and will inevitably bring great risk to network. Therefore it is very important to assess acuate security of network.After the firewall,the intrusion detection, the network security assessment is research stress in the network defensive field . it analyzes and assess security status of computer network system, finds and mends vulnerabilities which exist in the system, thereby reduces risk of system, assures network system to work normally.Along with network attack technology updates and developes ceaselessly , some former security defensive mersures which aim at network attacks are unable to defend , it is very important to recognize the security status of network system, this also objectively requests to strengthen research in the network security assessment. the goal of network security assessment assesses correctly security of system, reports the result of assessment to administrator, helps administrator to adopt corresponding security measures.The article constructs a network security model based on vulnerability scan, according to the model, design a network security assessment system. according to assessment system, administrator can find vulnerabilityies which exist in network system, and adopts relevant security defensive measures to mend vulnerabilities of system, assure network system to run safely.The paper of research work mainly has following several aspects:①The paper discusses the definition of network security, analyzes the main security threats that network faces, discusses the basic request and the goal of network security, and introduces the concept of security policy in network security. ②The paper studies the domestic and foreign development and the present situation of network security assessment, conducts the research about the related technology of the network security assessment, and studies network security assessment method.③The paper studies stress vulnerability of the network security assessment, constructs network security assessment model which is based on vulnerability scan, designs a network security assessment system, conducts the detailed design about the system basic function module.④The paper tests and analyzes the network security assessment system ,proves that this system design scheme is feasible.