Design And Implementation Of Cloud-Oriented, High-Performance Vulnerability Scanning Engine Module

The information revolution, which is represented by the internet technology, is profoundly changing our lives and the world around. In other words, the emergence of the Internet has played a tremendous role in promoting economic development and social progress of the world. At the same time, however, as a huge platform for information sharing, the Internet is faced with a growing number of security issues as it constantly open itself. Network security issues caused widespread concern in the world, and has become a research focus of the current network technology. Although there are some network security strategy, such as firewall technology and network intrusion detection technology, however, they are not enough. Network vulnerability scanning technology can found system vulnerability through the real-time scanning, and then repair it, which could make us take preventive measures. To sum up, the vulnerability scanning has become one of the hot technologies in the field of network security and their study has important implications.This paper is an increasingly urgent need to solve the network security needs, design and implement virtualization-based, cloud-oriented, high-performance vulnerability scanning engine module. Vulnerability scanning engine module can be divided into three levels, or control layer, business layer and data layer respectively. According to the hierarchical design of the system, the system is divided into five modules:scan function module, system management module, web control interface module, upper linkage interface module and database module. At the same time it supports cloud computing technology and support Xen or VMWare virtualization environment. Through a unified management platform, this system is deployed flexibly at the cloud platform and complete the high-perfromance scanning task under condition of large scale.