Vulnerability scanning system oriented to safety assessment and processing method thereof

Abstract

The invention discloses a vulnerability scanning system oriented to safety assessment and a processing method thereof. The system provided by the invention comprises a server side and a client side which are of a C / S (client / server) structure; the server side operates on a Unix or Linux platform, and the client side operates on a Windows platform; the server side comprises a client side verification module, a scanning engine service module, a scheduling process module, an invasion detecting module and the like; the client side comprises a server verification module, a scanning configuration module, a pre-warning module, an evaluation algorithm module, a scanning report processing module, a vulnerability expansion and Chinesization module and the like; and according to the invention, the vulnerability scanning system and the invasion detection system are combined, the pre-warning function and scheduling function are introduced, thus the system can carry out vulnerability scanning and safety assessment selectively and purposively according to the requirements of users, and a relatively objective and accurate vulnerability scanning report forms.

Description

technical field [0001] The invention relates to a loophole scanning system, in particular to a loophole scanning system oriented to network security assessment and a processing method thereof. Background technique [0002] At present, with the rapid development of computer network and communication technology, network security issues are becoming increasingly prominent. In the face of various network incidents and security issues, we deeply feel the importance and urgency of network security assessment. How to evaluate? What technology is used to implement the security assessment? This has aroused people's widespread attention and attention more and more, and has become a hot issue in the field of information security technology research. [0003] In the face of network security issues, through extensive analysis, it can be found that hackers and viruses usually parasitize and infiltrate into the target system through security holes, and modify and destroy the system to a...

AI Technical Summary

Problems solved by technology

[0005] Although the structural principle of this vulnerability scanning system in the prior art is relatively simple, there are several obvious deficiencies: first, this mode is relatively passive for vulnerability scanning, and generally it is when the user needs to detect the security of the system. It is impossible to discover system vulnerabilities in time; secondly, this mode cannot set up an effective scheduling mechanism for scanning tasks to realize regular scanning; thirdly, this mode generally divides the vulnerability levels into high, medium, and Low, then simply give a weight, and finally calculate and take the weighted average, because the algorithm is relatively rough, resulting in large errors in the evaluation report; fourth, this mode has no early warning function, and generally scans a system or network for vulnerabilities. Waiting for a long time, the user usually waits until the entire scan is over before repairing the vulnerability. If there is an intrusion attack targeting the corresponding vulnerability at this time, the user will not be able to find out

Images