Vulnerability detection processing method and device, computer and readable storage medium

Abstract

The embodiment of the invention discloses a vulnerability detection processing method and device, a computer and a readable storage medium, and the method comprises the steps: detecting a target virtualization component deployed in a host machine, and searching a component management channel associated with the target virtualization component; acquiring virtualized component vulnerability information published by the component management channel; detecting a virtual running component in a running state in the target virtualized component, and if a vulnerability associated component in the virtualized component vulnerability information exists in the virtual running component, determining that target component vulnerability information exists in the virtualized component vulnerability information; and updating the target virtualized component based on the vulnerability repair data related to the vulnerability information of the target component. The functions used for realizing the assembly include but are not limited to cloud service, cloud storage, cloud computing, cloud communication, middleware, safety service, vehicle-road cooperation, content distribution, big data, an AI platform, a map platform and the like. By adopting the method and the device, the accuracy of vulnerability detection processing can be improved.

Description

technical field [0001] The present application relates to the field of computer technologies, and in particular, to a method, device, computer, and readable storage medium for vulnerability detection and processing. Background technique [0002] Virtualization technology is the cornerstone of the cloud platform. If there is a security risk in the virtualization platform, it may damage the security and stability of the cloud host, cause the cloud host to be manipulated by attackers, leak sensitive data, and even affect the normal operation of the entire Internet. . Therefore, the vulnerability detection of virtual machines is extremely important. At present, the vulnerabilities of virtual machines are generally detected through vulnerability scanning systems or vulnerability exploitation tools, such as security assessment systems and system vulnerability scanning and analysis software. Determine whether the virtualization platform is affected by enumerating the vulnerabilit...

AI Technical Summary

Problems solved by technology

Because the deployment of the virtualization platform by the cloud vendors has been modified and compiled by themselves, the version numbers used by each cloud vendor are not uniform, and vulnerability scanning will cause a large number of false positives; Vulnerability detection, due to the isolation of virtualized virtual machines (visual personalcomputers, VPCs), the virtualization configuration of the parent machine is a black box for vulnerability scanning systems or exploit tools, and it is impossible to obtain kernel-based virtual machines (kernel-based virtual machine, KVM) and other host machine configuration information, which makes the verification information of the virtualization platform incomplete, resulting in inaccurate virtual machine vulnerability detection results.

[0003] Through the verification method tailored for specific vulnerabilities, the causes and principles of specific vulnerabilities are analyzed, and a customized vulnerability detection method is obtained. Since the vulnerabilities of virtual machines are not fixed, the verification and analysis methods are not fixed. Therefore, this method It is necessary to understand the details and causes of each virtualization vulnerability, as well as the principle and trigger details of each vulnerability, which leads to low efficiency of virtual machine vulnerability detection

Images