Distributed Vulnerability Scanning and Assessment Methodology

Abstract

The invention discloses a distributed type vulnerability scanning and evaluating method. According to the method, a control terminal sends scanning strategies and scanning objective data to at least one detection node, each detection node performs scanning actions according to received scanning strategies and scanning objective data and sends back scanning data to the control terminal, state information of each detection node at each period of state is sent to the control terminal, and the control terminal determines the state of each detection node according to the state information receiving time. According to the distributed type vulnerability scanning and evaluating method, the problem that a user is required to get involved in scanning each time is solved, meanwhile, the distributed type scanning is effectively realized, a task is effectively decomposed, the performance is improved, and the problem about secret-associated issues can be solved.

Description

technical field [0001] The invention relates to the field of vulnerability scanning and assessment, in particular to a distributed vulnerability scanning and assessment method. Background technique [0002] At present, the security problem of enterprise LAN environment is prominent. Enterprises are facing the pressure of terminal access control brought by internal threats, branches, visitors and mobile office. Professional hackers driven by profit often target enterprise terminals and exploit security loopholes in terminals. Obtain unauthorized access to important resources, and then launch attacks on core business systems, resulting in data eavesdropping or destruction, core business interruption, malicious code, information leakage and other security incidents, resulting in loss of business and reputation. Contents of the invention [0003] In view of this, the main purpose of the present invention is to provide a distributed vulnerability scanning and assessment method....

AI Technical Summary

Problems solved by technology

[0002] At present, the security problem of enterprise LAN environment is prominent. Enterprises are facing the pressure of terminal access control brought by internal threats, branches, visitors and mobile office. Professional hackers driven by profit often target enterprise terminals and exploit security loopholes in terminals. Obtain unauthorized access to important resources, and then launch attacks on core business systems, resulting in data eavesdropping or destruction, core business interruption, malicious code, information leakage and other security incidents, resulting in loss of business and reputation

Images