Security vulnerability management method and system and device

Abstract

The invention discloses a security vulnerability management method and system and a device, and belongs to the technical field of computers. The method includes the steps of receiving security vulnerability information uploaded by a user, sending the security vulnerability information to a management platform so that the management platform can find a repairer corresponding to the security vulnerability information according to the security vulnerability information, and sending prompting information to the repairer, wherein the prompting information is used for prompting the repairer to repair the security vulnerability information. By sending the safety vulnerability information uploaded by the user to the management platform so as to find the repairer corresponding to the security vulnerability information through the management platform and prompting the repairer to repair the security vulnerability information, the problems that work is complex and efficiency is low when multiple pieces of information containing security vulnerability are manually sent to corresponding developers respectively by interface personnel in the prior art are solved, and the effects that the reported security vulnerability information can be managed in a unified mode and the work efficiency can be improved are achieved.

Description

technical field

[0001] The present invention relates to the field of computer technology, in particular to a security loophole management method, system and equipment. Background technique

[0002] Security loopholes refer to defects in the specific implementation of software, hardware, and protocols, or in system security policies. When a system has a security hole, an attacker can access or destroy the system without authorization. In order to reduce the damage to the system by attackers, these security holes need to be collected and patched.

[0003] Currently, there is a security vulnerability collection method, which may include: security workers outside the Internet company collect the security vulnerabilities of the application programs released by the Internet company, and use the public contact information of the Internet company (for example, phone calls, chat applications or mail and other communication methods) to inform the interface personnel of the Internet ...

Images