Vulnerability restoration method based on knowledge graph

Abstract

The invention relates to the technical field of network security, and particularly discloses a vulnerability restoration method based on a knowledge graph, and the method is high in restoration efficiency, low in error rate and safe. The method comprises the following steps: S1, extracting features which can be identified and retrieved by a computer in a new vulnerability; S2, substituting the extracted new vulnerability features into a knowledge mapping vulnerability knowledge base for retrieval and identification; S3, when the new vulnerability feature is matched with any vulnerability in the vulnerability knowledge base, repairing the new vulnerability according to a preset repairing method corresponding to the vulnerability in the vulnerability knowledge base; S4, when the new vulnerability features are not matched with the vulnerabilities in the vulnerability knowledge base, summarizing associated vulnerability information in the matching process, and jointly performing decision fusion arrangement on the associated vulnerability information and the new vulnerability features extracted in the step S1 to output decision information; S5, reasoning the output decision information to generate a vulnerability solution; and S6, repairing a new vulnerability by using the vulnerability solution generated in the step S5, and updating the vulnerability solution in the step S5 to the vulnerability knowledge base.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method for repairing vulnerabilities based on knowledge graphs. Background technique [0002] Network security vulnerabilities are defects or weaknesses that are unintentionally or intentionally generated in the process of network system requirements, design, implementation, configuration, operation, etc., and need to be repaired in time to ensure the security of data information. With the increasing complexity of existing hosts and software systems, the possibility of loopholes is also increasing, which brings new challenges to the security maintenance of information technology. The traditional vulnerability repair method is that after the vulnerability appears, the technicians propose a solution, then update the vulnerability database, and repair the vulnerability. The vulnerability repair needs to last for a period of time. During the repair period, the host and sys...

AI Technical Summary

Problems solved by technology

[0003] Based on this, it is necessary to provide a knowledge graph-based vulnerability repair method for the technical problems that need to manually update the solution and the vulnerability library when repairing the vulnerability, the repair time is long, and the host and system are vulnerable to attacks during the repair period.

Images