Loophole severity assessment and repair method

Abstract

The invention discloses a loophole severity assessment and repair method comprising the steps of extracting M loopholes of a target host, and computing a static severity assessment result according to at least one piece of significant attribute information of each loophole; when the static severity assessment results of the N loopholes of the M loopholes are the same, computing a dynamic severity quantitative score of each loophole of the M loopholes; when the dynamic severity quantitative scores of the P loopholes of the N loopholes are the same, acquiring a timing sequence impact factor of each loophole of the P loopholes, and determining the loophole with the maximum timing sequence impact factor to be the loophole with the highest priority. According to the method provided by the invention, the problem that the repair priority of loophole cannot be determined is fundamentally solved, and accordingly the loophole can be repaired, the situation that a computer system has a potential major hazard is avoided, and security of the computer system is improved.

Description

technical field [0001] The invention relates to the field of vulnerability severity assessment, in particular to a vulnerability severity assessment and repair method. Background technique [0002] With the development of the Internet, the scale of Internet users and the penetration rate of the Internet are increasing year by year. However, with the emergence of endless security problems, the high outbreak of loopholes is one of the important reasons for endangering network security. Vulnerabilities refer to defects in computer systems in terms of requirements and design. These defects exist in all levels and links of computer systems. Once exploited by attackers, they will cause major harm to the computer system and affect its normal operation. In the situation where the number of vulnerabilities is increasing day by day, how to assess the severity of the vulnerabilities, and on this basis, it is very important to repair the vulnerabilities. [0003] At present, the severi...

AI Technical Summary

Problems solved by technology

[0005] The purpose of the present invention is to overcome the above-mentioned deficiencies in the prior art, and provide a vulnerability severity assessment and repair method to thoroughly clarify the severity of the vulnerability and then determine the priority of repair, fundamentally solve the problem that the priority of vulnerability repair cannot Identify the problems, repair the vulnerabilities, avoid potential major harm to the computer system, and improve the security of the computer system

Images