Development of security scanner with high usability
Development of security scanner with high usability
复制标题
开发高可用性安全扫描仪
DOI：
10.1109/aina.2004.1283901
复制
发表时间：
2004
期刊：
影响因子：
--
通讯作者：
T. Takata
中科院分区：
文献类型：
--
作者：
Michitaka Yoshimoto;B. B. Bista;T. Takata
在本文中，我们提出并开发了一个高可用性的安全扫描器。任何用户都可以轻松操作扫描仪。最近，非法进入的情况急剧增加。无论是专家还是初学者都需要及时、正确地科普系统的脆弱性。在这种情况下，安全扫描程序是指出漏洞的有效工具。然而，对于一般用户来说，大多数目前可用的安全扫描器难以安装和操作，因为它们具有相当差的可用性。我们的安全扫描器的设计标准是，它应该是基于Web的，不应该依赖于操作系统，不应该需要任何安装。为了实现这些目标，我们采用Perl和Macromedia Flash开发的安全扫描器。此外，由于所有的扫描过程都只需要点击一下鼠标，我们的安全扫描仪大大提高了可用性。此外，我们还引入了一个扩展脚本文件，其中包含了针对初学者用户的额外漏洞信息、来自操作系统或应用程序供应商的漏洞详细描述、翻译成用户本地语言的描述等，并且基于人机界面研究的知识进行了设计，如显示扫描进度条。我们的安全扫描仪的可用性进行了评估，通过比较与现有的安全扫描仪的可用性，使用几个观点。在功能上，通过使用Nessus的外部脚本，实现了很高的可扩展性和可靠性。
In this paper, we propose and develop a security scanner with high usability. Any user can operate the scanner easily. Recently, illegal access has been increasing tremendously. Not only the expert but also the beginners need to cope up with vulnerability of a system promptly and properly. In such cases, a security scanner is an efficient tool to point out the vulnerability. However, for general users, most of the presently available security scanners are hard to install and operate because they have considerably poor usability. Our design criteria of the security scanner are that it should be Web based, should not depend on operating systems, and should not need any installation. To attain these goals, we adopted Perl and Macromedia Flash for development of the security scanner. Moreover, since all the scanning processes are performed only by one mouse click, our security scanner improves usability enormously. Additionally, we have introduced an extension script file, which contains additional vulnerability information for beginner users, detailed description of vulnerability from OS or application vendor, translated description into users' local languages, and so on. In addition, we designed it based on the knowledge of human interface study such as displaying scanning progress bar. Usability of our security scanner was evaluated by comparing with the usability of the existing security scanners using several points of view. In functionality, we have realized very high extensionality and reliability by using the external script of Nessus.