Pattern Matching-based Wireless Network Security Configuration Verification Tool

doi:10.3969/j.issn.1006-2475.2015.10.021

Abstract

Abstract: According to the serious situation of wireless network security, a wireless network security configuration verification tool based on pattern matching is designed and implemented. First of all, according to the relevant provisions of grade protection and through the study of risk assessment of wireless network, the wireless network security configuration verification specification is made; then, on account of the shortcomings of the existing detection methods, an automation configuration verification method based on pattern matching is proposed; finally, the system architecture, module functions and implementation of the tool are provided.

Key words: wireless network security, pattern matching, configuration verification tool, grade protection, risk assessment

CLC Number:

TP393

TANG Lian, WANG Xiao-long. Pattern Matching-based Wireless Network Security Configuration Verification Tool[J]. Computer and Modernization, doi: 10.3969/j.issn.1006-2475.2015.10.021.

References

[1] Zhao Dongmei, Wang Changguang, Ma Jianfeng. A risk assessment method of the wireless network security[J]. Journal of Electronics (China), 2007,24(3):428-432.

[2] Tsai Hsin-Yi, Huang Yu-Lun. An analytic hierarchy process-based risk assessment method for wireless networks[J]. IEEE Transactions on Reliability, 2011,60(4):801-816.

[3] 傅建新,黄联芬,姚彦. 基于层次分析法-灰色聚类的无线网络安全风险评估方法[J]. 厦门大学学报(自然科学版), 2010,49(5):622-626.

[4] 陈娟,马涛,王勇. 基于灰色模糊的无线网络安全评估模型[J]. 火力与指挥控制, 2012,37(3):177-179.

[5] 李春芳,李超,湛高峰. 无线局域网中实现信息系统安全等级保护的要求[J]. 等级保护, 2011(6):17-19.

[6]绿盟科技. 绿盟安全配置核查系统[DB/OL]. http://www.nsfocus.com.cn/products/details_36_13.html, 2014-12-28.

[7] 启明星辰. 安全配置核查管理系统(基线)——安全合规配置先行[DB/OL]. http://www.venustech.com.cn/SafeProductInfo/517/47.Html, 2014-12-28.

[8] 王甜,夏斌伟,徐辉,等. 信息系统安全等级测评配置检查工具研究与实现[J]. 计算机应用与软件, 2014,31(7):311-315.

[9] GB/T 22239-2008, 信息安全技术:信息系统安全等级保护基本要求[S].

[10] GB/T 20984-2007, 信息安全技术:信息安全风险评估规范[S].

[11] Zhu Ruoxin, Cui Xiaojie, Gong Shijuan, et al. Model for cloud computing security assessment based on AHP and FCE[C]// Proceedings of the 9th IEEE International Conference on Computer Science & Education. 2014:197-202.

[12] Fu Sha, Zhou Hangjun. The information security risk assessment based on AHP and fuzzy comprehensive evaluation[C]// Proceedings of the 3rd IEEE International Conference on Communication Software and Networks. 2011:124-128.

[1]	LU Sai, ZHUANG Yi. Information System Risk Assessment Model Based on Self-Adaptive Expert Weight [J]. Computer and Modernization, 2021, 0(08): 85-93.
[2]	CUI Wen-di, DUAN Peng-fei, ZHU Hong-qiang, LIU Na. Security Risk Assessmenton of Attack Graph and HMM Industrial Control Network [J]. Computer and Modernization, 2020, 0(07): 32-37.
[3]	YE Qian1,WANG Yu-fei2,FU Yi3,TANG Yu-lan1. GQM-based Risk Assessment Method for Industrial Control Systems [J]. Computer and Modernization, 2019, 0(08): 92-.
[4]	MI Qian-kun1, WU Bin2, DU Ning1,QIN Xi1. Information System Security Risk Assessment Based on Incomplete Information Game Model [J]. Computer and Modernization, 2019, 0(04): 118-.
[5]	WANG Yin， GUO Hong-yu. CART-based Risk Assessment of Community Correction Staff [J]. Computer and Modernization, 2018, 0(08): 73-.
[6]	HUANG Yujie, TANG Zuoqi. Information Security Risk Assessment Based on Improved Bayesian Network Model [J]. Computer and Modernization, 2018, 0(04): 95-.
[7]	ZHANG Chun, YUAN Tian-ning. Design of Multi-source and Heterogeneous Data Fusion Framework for Integrated Lifecycle Management of EMU [J]. Computer and Modernization, 2017, 0(10): 36-41.
[8]	CHEN Chong, JIANG Xia-jun. An Efficient XML Pattern Matching Algorithm for Supporting Wildcard Query [J]. Computer and Modernization, 2016, 0(4): 65-73.
[9]	YANG Long-ping;XU Yi-lu. Influence of Two Kinds of Self-organization Function for Assessment of Information Security Asset Value [J]. Computer and Modernization, 2013, 218(10): 102-105.
[10]	LIANG Yong;DAI Xiao-peng;;LI Wang;. Research on Risk Assessment of Alien Species Based on AHP [J]. Computer and Modernization, 2012, 1(9): 205-208.
[11]	DENG Kai-yuan;JIANG Lei. Performance Analysis of Different Regular Expressions Matching Engines [J]. Computer and Modernization, 2011, 7(7): 105-107,.
[12]	PENG Wen-hui;;WU Xiao-gang;;JIANG Hua. Campus BBS Filtering System Based on Flexible Pattern Matching in Strings [J]. Computer and Modernization, 2011, 1(2): 0-147.
[13]	WU Ye-ke;SONG Ru-shun;CHEN Bo. Fuzzy Risk Assessment of Information Security Based on WOWA [J]. Computer and Modernization, 2010, 1(11): 136-138,.
[14]	SUN Qin-hong;ZHU Ying-wen. Application of Regular Expressions in Knowledge Points Extraction of Computer Category Materials [J]. Computer and Modernization, 2009, 1(7): 111-112,.