Processing method and device for leak evaluation

Abstract

The invention provides a processing method and device for leak evaluation. The processing method for the leak evaluation is characterized by comprising the steps of (1) obtaining leak information of a system, wherein the leak information comprises a leak identification and a relevant parameter between a leak and the system; (2) determining a reference risk value of the leak according to the leak identification; (3) obtaining weighted values of relevant services of the leak in the system according to the relevant parameter; (4) determining a risk evaluation grade of the leak according to the reference risk value of the leak and the weighted values of the relevant services. When the processing method for the leak evaluation and the processing device for the leak evaluation are used for carrying out processing on the leak evaluation, the leak and the services relative to the leak are associated, the risk evaluation grade of the leak accords with harm degrees of leaks to the system in reality, thus a reasonable leak repair scheme can be made, and the processing method for the leak evaluation and the processing device for the leak evaluation play a role of prevention.

Description

technical field [0001] The invention relates to the field of information technology, in particular to a processing method and device for vulnerability evaluation. Background technique [0002] Computer systems always have flaws and deficiencies in the design of hardware, software, and protocol layers. These flaws and deficiencies are called system vulnerabilities, which can be exploited by illegal users to obtain system privileges, and then perform illegal operations on the system, resulting in Serious consequences, such as hackers attacking the enterprise's server, causing the enterprise's operating system to be paralyzed, or stealing core business, thereby causing economic losses to the enterprise, etc. [0003] In order to prevent problems before they happen, it is necessary to detect the vulnerabilities of the system, find and fix the vulnerabilities before they are exploited. Usually, the system will detect multiple vulnerabilities through the vulnerability scanner, an...

AI Technical Summary

Problems solved by technology

[0004] However, when the above-mentioned vulnerability evaluation scheme was used to formulate the repair plan, it was found that the risk level of each vulnerability assessed by the above-mentioned vulnerability database according to the evaluation standard did not conform to the actual harm of each vulnerability to the system, so the vulnerability repair plan formulated was not reasonable enough and could not be effectively implemented. to the preventive effect

Images