Vulnerability scanning and threat intelligence based unified vulnerability management and warning platform

Abstract

The invention discloses a vulnerability scanning and threat intelligence based unified vulnerability management and warning platform. The platform comprises a multi-form vulnerability scanning engine module, an engine equipment management module, an accurate asset warning module, a priority analysis module, a process optimization analysis module, an internal plan communication module, a vulnerability management module and a system management module. Through a unified management mode, multiple lower multi-mode vulnerability scanning engines are subjected to unified dispatching, task issue and result return, asset statistic information and external intelligence information can be combined to realize threat warning of assets in the corporate scope, the platform can be used in the corporate information internal-external network single-network environment as well as in information internal-external network province, city and county cascade environment, the advantages of the platform in the longitudinal cascade or transverse distribution network environment can be reflected more fully, and integrated defense in electric power company information security is realized.

Description

technical field [0001] The invention relates to the field of vulnerability scanning technology and threat intelligence sharing technology, in particular to a unified vulnerability management and early warning platform based on vulnerability scanning and threat intelligence. Background technique [0002] The Internet security issue of using security loopholes to carry out network attacks is like a shadow in the sun, always accompanying the development of Internet industry applications. In recent years, the form of network security threats has also undergone different changes. The attack method has changed from a simple tool attack downloaded by a single hobbyist to an attack program specially written by organized professional technicians. The purpose of the attack has changed from proving personal technology A shift in power toward commercial or national information theft. [0003] Changes in new attack methods will still use various vulnerabilities, such as: the IE browse...

AI Technical Summary

Problems solved by technology

But risk management lacks practice and often strays from business goals

Images