Active network safety loophole detector

Abstract

This invention discloses an active network safety leakage detector composed of three control modules of a detect agent, a data center and an analysis control stand, among which, the detection agent collection system matches the information and upwards it to the data center, the analysis control stand analyzes information stored in the data center to identify the host leakage by the OVAL leakage definition and carry out the associate analysis of attack / leakage by the predicate logic theory to find out the safety problem brought with the leakage combination to display potential attack paths in sight.

Description

technical field [0001] The invention belongs to the technical field of computer network security, and in particular relates to an active network security loophole detector AVCS (Active Vulnerability Checker for computer network Systems), which is used for detecting network security loopholes. Background technique [0002] Vulnerability is the root of all network security problems. Vulnerability detection is the basis for solving network security problems. Only by understanding the security risks existing in the system can we achieve targeted defense and avoid blind protection. As soon as the vulnerability detection technology was proposed, it attracted great attention in the field of network security, and it was listed as the mainstream research direction of network security together with firewall, intrusion detection, encryption and virus prevention technologies. [0003] From domestic and foreign database retrieval and literature analysis, the detection of known vulnerabil...

AI Technical Summary

Problems solved by technology

No matter whether the model detection technology or the model using graph analysis technology is used, the problems of organic integration with vulnerability detection results, expansion in large-scale networks or visual display of attack paths are not well handled.

Images