软件脆弱性影响分析模型

软件脆弱性的本质是利用该脆弱性可以影响系统的安全。每个软件脆弱性对系统安全造成的影响及其危害程度是不同的。基于此，在研究软件脆弱性影响相关分类存在的问题的基础上，分析脆弱性的直接影响和最终影响及其关系，指出确定软件脆弱性直接影响的原则，设计出基于影响广度和深度的脆弱性直接影响的分析模型。分析系统级、用户级和文件级的脆弱性直接影响模式，并给出模型在大规模特定域网主动防御系统中的相关设计与实现。

Software Vulnerability Effect Analysis Model

The essence of software vulnerability is to exploit and affect system security. Different software vulnerabilities cause different effects to system and the severity is various as well. Based on the critical research of some typical taxonomy relative to software vulnerability effects, the direct effect and final effect and relationship between are analyzed. The key factor of software vulnerability direct effect is demonstrated and the software vulnerability analysis model based on effect width and depth is proposed. The direct effect modes are analyzed including system level, user level and file level. The design and implementation of model on active defense system for large scale network of mission-critical domain are given.