Design And Realization Of OVAL-compatible Multiplatform Patch Management System

With the development of information industry, the cover range of internet become ever more widely. There are more and more services and the applications of client running though the internet. The net is consisted by the computer which is installed with different operation systems such as Windows, Linux and so on. Under these circumstances, it would be an impossible mission if we want to patch such a large number and cross platform systems unless we have a cross platform patches management tool. So it is an emergent task to develop a cross platform patch management tool which could be used under nowadays network environment.This paper mainly discussed theories and technologies interrelated related to system vulnerabilities and patches. The analyses of current patch management system and compared each management process, we concluded that the scheme of patch management should keep consistency through the three stages of patch management, and the final scheme should pass the test of practice.In this paper we design an OVAL-compatible cross platform patch management system. It gives out detailed account of the key technology in development, including finding out the allusive relationship between OVAL, CVE and Microsoft patching information, constituting patching definition class of Windows and Linux, solving the problem of obtaining patch information under Windows and Linux operating system and the alternate process of patch installing.Realized the system, It give out detailed account of the key technology in Implementation. In the mean time, we give out the method to improve the system's efficiency includes realization the file management crossing multiplatform, using Singleton mode to improve the efficiency of memory accessing and using multithread to improve the efficiency of vulnerability information obtaining process. Through the test of the running system and comparing with similar system, we prove that the system we realized can manage the system patch under the Windows and Linux; it can also enhance the efficiency of patch dispatching and extend the range of patch which could compatible with system. All of those are compatible with OVAL criterion. In the end, we come out with suggests about the following work.