Safe Patch Distribution Architecture in Intranet Environments

摘要

Patch distribution is one of important processes to fix vulnerabilities of softwares and to ensure security of systems. Since an institute or a company has various operating systems or applications, it is not easy to update patches promptly. In this paper, we will propose a secure and automatic patch distribution framework with an authentication mechanism, a security assurance mechanism, a patch integrity assurance mechanism, and an security patch profile mechanism. We argue that the proposed framework can improve security of patch distribution processes.