Design Of Vulnerability Scanning System Based On OpenVAS

With the rapid development of computer technology, the Internet has become an necessary communication tool in daily life. However, when we enjoy the convenience of the Internet, the security issues of Internet is also becoming more and more serious, there are a variety of malicious attacks on the Internet every day. Vulnerability scanning technology can detect the potential vulnerabilities of the system, so the system defenders can predict the attacker's behavior in advance, and reduce the loss caused by the hacker attacks.This paper deeply studies and analyses the technologies and working principles of OpenVAS(an efficient open source vulnerability scanning tool). In this paper, the OpenVAS is transplanted to the NeoKylin system, which is running on the LoonGson-3B Server. On the basis of it, we carried out further development, and realized a vulnerability scanning system based on domestic server. The main job of this paper is as follows:(1) Researching security vulnerabilities deeply and analyzing the causes of vulnerability and possible hazards. Describing the common vulnerability scanning technology and related technologies of OpenVAS. Learning the OMP protocol, which is order to achieve the deeply development of the Open VAS.(2) Learning Open VAS vulnerability scanning system deeply. Reading the source code of scanning module and doing some things which could improve the efficiency of it. Researching NASL script and analyzing the typical script of NASL. Working transplantation job of OpenVAS on the platform of NeoKylin sucessfully.(3) Based on B/S architecture, designing and completing the vulnerability scanning system which is mainly composed of web, controller and database.(4) Establishing test environment of vulnerability scanning system, and finishing test on the platform Linux, Windows and Mac system. Verifying the feasibility and effectiveness of this system.After system testing and product examination, the current localization vulnerability scanning system has passed the acceptance and used in practice.