A Method and Device for Rapid Assessment of Vulnerability Hazard Level Based on Multidimensional Statistics

Abstract

The invention relates to a method and device for rapidly evaluating the vulnerability hazard level based on multi-dimensional statistics. The method includes the steps that 1) a vulnerability keyword is input; 2) the input vulnerability keyword serves as a searching condition to be submitted to an international space searching engine, and the corresponding recording quantity result is obtained; 3) according to the input vulnerability keyword, a database where vulnerability history information is stored is scheduled, the searching condition is input into the database, and a result list is returned; 4) the input vulnerability keyword is submitted to a social network as a searching condition, and the corresponding vulnerability-related statistics trend is obtained through the social network; 5) the results obtained in the step 2) to the step 4) are processed, and a multi-dimensional statistic report of the vulnerability hazard level is formed. According to the method and device, the multi-dimensional statistic technology with the international space dimension, the history statistic dimension and the real-time hot point dimension is adopted, an information security technology manager can be assisted in conveniently and rapidly learning vulnerability and the hazard degree of the vulnerability, and the hazard level of the vulnerability can be more rapidly and effectively judged.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to a method and device for rapidly assessing vulnerability hazard levels based on multidimensional statistics. Background technique [0002] The computer system is the most important part of the current information age and information products, and the security loopholes in the computer system have become the decisive factors that directly affect the security of the information system. Practice has proved that the vast majority of information security incidents are initiated by attackers with the help of information system security vulnerabilities, and such incidents have intensified in recent years, and their impact is also increasing. Therefore, in-depth research on the connotation and extension, characteristics and nature, types and impacts of security vulnerabilities, as well as rapid analysis and evaluation of their hazard levels in multiple dimensions,...

AI Technical Summary

Problems solved by technology

[0006] In addition, the final rating conclusion of CVSS mostly occurs in the "post-event" stage. For 1Day security vulnerabilities, the decision-making and disposal timing is made at the first time. CVSS's rating lags behind and the rating is revised again, which makes its conclusions lack of support for information security managers. value

Images