Vulnerability scanning method and server and risk assessment system

Abstract

The invention discloses a vulnerability scanning method and server and a risk assessment system and relates to the technical field of information security. The method comprises the steps that the server receives a scanning parameter configuration file from a client side and scans a scanned target according to the scanning parameter configuration file; the server extracts keywords from a scanning result; based on a bloom filter algorithm, the server performs quick matching on the extracted keywords and vulnerability features, compressed based on the bloom filter algorithm, in a vulnerability library, and the server determines whether vulnerability exists in the scanning result according to a matching result. As the vulnerability features are compressed based on the bloom filter algorithm, the know vulnerability features can be compressed into an m-bit array, and then storage space is reduced. In addition, a Hash operation is performed on the scanned keywords based on the bloom filter algorithm, matching is performed on Hash operation results and the m-bit array of the known vulnerability features, in this way, it can be determined whether the vulnerability exists in the scanning result, and the matching speed is higher.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a vulnerability scanning method, a server, and a risk assessment system. Background technique [0002] On the modern information highway, the computer network has become a bridge for people to learn and communicate with the world. People share information resources through the network, which not only expands space and time, but also improves work or study efficiency. However, with the continuous expansion of the network scale, the number of network security incidents and the losses caused by them are also increasing. Especially viruses, hackers and other cyber crimes pose a great threat to computer network security. Therefore, while we are benefiting from the various benefits brought by computer networks, we must also face the severe test of network security. [0003] In response to this situation, the industry proposes that vulnerability scanning technology can b...

AI Technical Summary

Problems solved by technology

[0007] A technical problem to be solved by the embodiments of the present invention is to propose a vulnerability scanning method, server, and risk assessment system to solve the problems that the vulnerability library occupies a large storage space and the vulnerability feature matching speed is slow

Images