Vulnerability scanning method and system

Abstract

The invention discloses a vulnerability scanning method and system and relates to the technical field of computer network information security. Vulnerability scanning service results for heterogeneous systems are integrated according to uniform standards so as to integrate and standardize vulnerability scanning results; various sources and security problems are quantitatively handled so as to compare the vulnerability scanning conditions of the heterogeneous systems under the uniform standards; security index for various assets is acquired by computation so that security maintenance is further guided. On the whole, the vulnerability scanning method and system according to the embodiment has the advantages that assessment of uniform standard vulnerability scanning results is achieved, vulnerability scanning reports having guidance significance, based on high relevancy of heterogeneous system vulnerability scanning services and allowing assessment in accordance with the uniform standards are finally formed, and security maintenance is guided for users.

Description

technical field [0001] The invention relates to the technical field of computer network information security, in particular to a vulnerability scanning method and system. Background technique [0002] In recent years, webpage vulnerability scanning technology and vulnerability scanning technology for various application systems and network environments have developed vigorously. Many manufacturers and brands of vulnerability scanning service products have appeared on the market. Scanned object), but it also caused a major problem: the missed scan results of various heterogeneous system vulnerability scanning products cannot be integrated, analyzed and evaluated, and thus cannot give users a comprehensive and valuable conclusion report , cannot guide users to realize the security maintenance work in the whole application field. [0003] The basic implementation steps of the existing analysis method for vulnerability scanning service results are as follows: [0004] 1. Facin...

AI Technical Summary

Problems solved by technology

[0002] In recent years, webpage vulnerability scanning technology and vulnerability scanning technology for various application systems and network environments have developed vigorously. Many manufacturers and brands of vulnerability scanning service products have appeared on the market. scanned objects), but it also caused a major problem: the results of various heterogeneous system vulnerability scanning products cannot be integrated, analyzed and evaluated, and thus cannot give users a comprehensive and valuable conclusion report , cannot guide users to realize the security maintenance work in the whole application field

[0007] Existing reports on missed scan service results of heterogeneous systems do not carry out in-depth processing of each missed scan result, and the correlation between missed scan results is small or even non-correlative, and it is impossible to achieve a unified and standardized evaluation of missed scan results , so it is impossible to form a final guiding significance, which makes it very difficult to compare and cannot achieve the purpose of guiding users' security maintenance work.

Images