Method and device for scanning plug-in and determining rule scheduling sequence in plug-in

Abstract

The invention discloses a method and device for scanning a plug-in and determining the rule scheduling sequence in the plug-in. The method includes: during the determining stage of the rule scheduling sequence in the plug-in, determining the resource consumption of each independent rule in rule channels and the hit rate of loophole scanning of the rule channels; determining the scheduling sequence of each rule channel according to the resource consumption and the hit rate; during a scanning stage, sequentially performing loophole scanning according to the scheduling sequence of each rule channel. The method has the advantages that the plug-in is granulated according to the independent rules, the minimum unit of scanning scheduling is granulated into the rule channels, the reasonable rule channel scheduling sequence is determined automatically, plug-in scanning speed and efficiency are increased, computer resources are saved at the same time, and the overall scanning performance of a loophole scanner is increased.

Description

technical field [0001] The invention relates to the technical field of Internet security, in particular to a method and device for scanning plug-ins and determining the scheduling order of rules in the plug-ins. Background technique [0002] With the increasing development of network technology, network security has become a hot spot. A vulnerability scanner is a program that automatically detects security weaknesses on remote or local hosts. According to the existing operating mechanism, the vulnerability scanner needs to load the supported plug-ins into the memory during startup, and then schedule these plug-ins as required, so that these plug-ins can scan corresponding vulnerabilities during the running process. [0003] In the prior art, the smallest unit of vulnerability scanner scheduling is a plug-in. For a plug-in, there may be many rules and conditions for scanning whether a vulnerability exists, ranging from a few to dozens of rules. When scanning plug-ins, the s...

AI Technical Summary

Problems solved by technology

[0005] The present invention proposes a method and device for plug-in scanning and determining the scheduling order of rules in the plug-in, which is used to solve the problem that the vulnerability scanner in the prior art usually randomly selects the rule conditions in the plug-in or manually adjusts the rule conditions when scanning vulnerabilities. , so it has great randomness and uncertainty. When scanning multiple unknown scanning targets, a lot of time and computer resources are wasted due to improper internal rule scheduling sequence of each plug-in, which reduces scanning speed and low efficiency. , an issue that caused the overall scan performance of the Vulnerability Scanner to be low

Images