A cross-regional vulnerability library sharing and cooperative processing system and method

Abstract

The invention relates to a cross-regional vulnerability database sharing and cooperative processing system and method, and the system comprises a production control large area and a management information large area, the production control large area is not connected with the Internet, a power special network security isolation device exists between the production control large area and the management information large area, and vulnerability database information sharing is carried out between the two large areas through a cross-regional vulnerability database synchronization mechanism. The vulnerability database of the management information large area obtains data through the Internet, and the manufacturer vulnerability database obtains data from a preset vulnerability radar interface; The management information large area updates vulnerability database information of the management information large area through the Internet, and pushes the vulnerability database information to a vulnerability rapid management and control platform of the production control large area through a data transmission mechanism of the power private network security isolation device; The vulnerability rapid treatment management and control platform of the production control large area updates vulnerability database information through an interface and pushes the vulnerability database information tothe vulnerability rapid treatment management and control platform of the management information large area; and the management information and the production control large area periodically and synchronously exchange vulnerability library information and update respective vulnerability libraries under the strategy control.

Description

technical field [0001] The invention relates to a system and method for cross-region vulnerability database sharing and collaborative processing. Background technique [0002] Information system cyberspace is composed of numerous nodes, each node is an IT asset (or information asset) connected to the network, and information assets include host operating systems, network devices, security devices, databases, middleware, and application components. Information assets are the most basic and important carrier in information security management. With the continuous growth of the internal business of the enterprise and the rapid development of business informatization, various business support platforms and management systems are becoming more and more complex. As the resources become richer and richer, the asset management work brought to administrators becomes more and more difficult. Over time, a large number of unowned assets and zombie assets have been generated. These ass...

AI Technical Summary

Problems solved by technology

Over time, a large number of unowned assets and zombie assets have been generated. These assets have not been maintained for a long time, resulting in more known vulnerabilities and configuration violations.

What's more serious is that these assets are difficult to be included in the daily maintenance scope of administrators, which brings great hidden dangers to enterprise security and becomes the weakness of enterprise information security.

[0003] Taking power grid enterprises as an example, common power information equipment, such as servers, switches, routers, power communication terminals, smart power transformation equipment, etc., once a security problem occurs, it will affect the normal acquisition of power information and the normal supply of power services. People's daily production and life bring a lot of inconvenience, but also cause great economic losses.

Images