An Internet-based vulnerability information cloud service method

Abstract

The present invention relates to an Internet-based vulnerability information cloud service method. Firstly, a data source is selected, a characteristic vulnerability is extracted from a resource platform, and then a core data source is determined, a data set is established, and a statistical trend analysis is performed on it; through Different time points divide the life cycle of a vulnerability into several stages, and each stage reflects its own status and accompanying risks; data preprocessing, mapping, drawing, and display are performed. The beneficial effects of the present invention are as follows: through data analysis, data mining, and data display on loopholes and other data, combined with the cloud computing model, Internet-based loophole information cloud services are implemented, which is conducive to realizing internal applications, supporting leadership decision-making, and popularizing information security to the public Information, auxiliary information security situation assessment and other functions; this method mode has great flexibility, enough to adapt to various types and sizes of applications in various software development and deployment stages.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to an Internet-based vulnerability information cloud service method. Background technique [0002] Cloud computing is an important part of emerging industries. Cloud computing is a mode of delivery and use of IT resources, which refers to obtaining the required hardware, Resources such as platforms, software, and services; the network that provides resources is called "cloud", and its computing power is usually built by distributed large-scale clusters and server virtualization software. The advantage of cloud computing is that the resources in the "cloud" can be infinitely expanded from the user's point of view, and can be obtained at any time, used on demand, expanded at any time, and paid for use. [0003] As important information security data, vulnerability information is of great significance to the development of national information security. NVD (National Vul...

AI Technical Summary

Problems solved by technology

[0005] The present invention provides an Internet-based vulnerability information cloud service method that provides rich information security data for relevant government departments, "8+2" important industries, information security manufacturers and all walks of life, so as to solve the shortage of existing vulnerability information services

Images