随着互联网不断发展、贴近生活,电子化的生活安全依赖着网络安全。在漏洞泛滥的今天,网络安全状态不容乐观,许多机构都因没有及时处理漏洞导致被恶意入侵,若网络安全保护不当,将会影响现实安全。中小型网络运维人员常因为外部因素影响难以开展网络安全行动。为了应对这一问题,本文研究尝试用Python语言尝试做一个集成漏洞扫描系统的设计与实现。运用以Python为基础的Web框架实现快速的业务开发,构建一个B/S架构模式,面向初级运维人员、初级网络安全研究者的低学习成本漏洞扫描系统平台,方便他们的工作需要。
关键词:Python;漏洞扫描;网络安全;轻量级
With the continuous development of the Internet and its closeness to life, the safety of electronic life depends on network security. Today, with the proliferation of vulnerabilities, the state of network security is not optimistic. Many organizations have been maliciously invaded due to failure to deal with vulnerabilities in a timely manner. If network security is not properly protected, it will affect real security. It is often difficult for small and medium-sized network operation and maintenance personnel to carry out network security operations due to external factors. In order to deal with this problem, this paper tries to use Python language to try to design and implement an integrated vulnerability scanning system. Use the Python-based web framework to achieve rapid business development, build a B/S architecture model, and provide a low-learning-cost vulnerability scanning system platform for junior operation and maintenance personnel and junior network security researchers to facilitate their work needs.
Key words:Python; vulnerability scanning; network security; lightweight