Method and device for assigning large-scale vulnerability scanning task

Abstract

The invention discloses a method and a device for assigning a large-scale vulnerability scanning task. The method comprises the following steps: receiving a scanning task issued by a cloud platform, wherein the scanning task comprises the identity set of target hosts, the identity set of a plug-in and a corresponding relation of the plug-in and vulnerability; partitioning the scanning task into at least two sub-tasks according to the corresponding relation of the plug-in and vulnerability; determining the number of virtual nodes according to the number of partitioned sub-tasks; assigning target hosts corresponding to each sub-task to each virtual node on average in sequence. By adopting the technical scheme of the invention, the scanning task assigning rationality and the vulnerability scanning efficiency are increased.

Description

technical field [0001] The invention relates to the field of the Internet, in particular to a method and device for task assignment of large-scale vulnerability scanning. Background technique [0002] Cloud computing is the core technology of a next-generation computing platform that can provide dynamic resource pools, virtualization, and high availability. The services provided by cloud computing are oriented to a large number of user groups, and the system must process massive tasks all the time. Therefore, the efficiency of resource allocation has a great impact on the overall system performance of the cloud computing platform. Key points and difficulties in computing. [0003] With the increasing development of network technology, network security issues have become a focus of attention. Large-scale vulnerability scanning for this issue is a typical application of cloud computing. Among them, the virtual nodes for vulnerability scanning constitute the resource pool of ...

AI Technical Summary

Problems solved by technology

[0005] 1. The number of virtual nodes performing scanning tasks is directly affected by the experience of the inspectors. On the one hand, the professional requirements of the inspectors are high, and on the other hand, the accuracy of the number of nodes determined by the subjective judgment of the inspectors is also low;

[0006] 2. Although the number of target hosts assigned to each node is the same, the time required for vulnerability scanning for each host is also different, which makes the rationality of this task allocation method poor;

[0007] 3. The relationship between vulnerabilities is not considered when assigning tasks. Each node can only scan for vulnerabilities after loading all the plug-ins in the scanning task, which makes the node perform scanning tasks slowly and reduces the efficiency of vulnerability scanning.

Images