Distributed host vulnerability scanning method

Abstract

The invention discloses a distributed host vulnerability scanning method, comprising: establishing an IP address of a host and a data table corresponding to geographic positions; configuring geographic position information of a plurality of scanners, and configuring one of the scanners as a main scanner and others as slave scanners; inquiring the geographic position corresponding to the IP address of a to-be-scanned host in the data table; the main scanner creating a plurality of scanning tasks, and distributing the IP address of the to-be-scanned host, corresponding to the same geographic position, to a same scanning task; the main scanner distributing the scanning tasks corresponding to each geographic position to the scanner on the geographic position; and each scanner respectively performing vulnerability scanning on the to-be-scanned host which is corresponding to the IP address in the scanning tasks. Through using a distributed technology, and according to the geographic position of the host, distributing the scanning tasks to the scanner on the same geographic position, an accurate vulnerability scanning report can be obtained in time, thereby improving host vulnerability scanning efficiency.

Description

technical field [0001] The invention relates to the field of network security, in particular to a distributed host vulnerability scanning method. Background technique [0002] Vulnerability scanning refers to a security detection behavior that detects the security vulnerabilities of a specified remote or local computer system through scanning and other means based on the vulnerability database, and finds exploitable vulnerabilities. Vulnerability scanning technology is an important class of network security technology. It cooperates with the firewall and the intrusion detection system to effectively improve the security of the network. By scanning the network, network administrators can understand the security settings of the network and the running application services, discover security vulnerabilities in time, and objectively evaluate the network risk level. Network administrators can correct network security vulnerabilities and wrong settings in the system according to...

AI Technical Summary

Problems solved by technology

[0005] The technical problem to be solved by the present invention is to provide a distributed host vulnerability scanning method capable of timely and accurately discovering host vulnerabilities in order to overcome the defects of low vulnerability scanning efficiency and inability to timely and accurately discover vulnerabilities in the prior art

Images