Vulnerability management system and vulnerability management method

Abstract

The invention relates to the field of information security, and in particular to a vulnerability management system and a vulnerability management method. The vulnerability management system comprises an asset management module, a vulnerability scanning module, a vulnerability management module, a vulnerability processing module and a vulnerability analyzing module; all assets including public network assets and vulnerability can be comprehensively found by the asset management module and the vulnerability scanning module; analysis, trace and management of the vulnerability are realized by the vulnerability analyzing module, the vulnerability processing module and the vulnerability management module, so that the vulnerability management system has the effects that detailed record and trace can be carried out on the assets and the vulnerability, security conditions of the assets and the vulnerability in the system also can be evaluated and the management efficiency of the assets and the vulnerability in the system is improved.

Description

technical field [0001] The invention relates to the field of information security, in particular to a vulnerability management system and method. Background technique [0002] At present, people are paying more and more attention to network security, and the protection of assets is becoming more and more important. Assets need to be checked, and loopholes should be recorded and corrected at the same time, so as to achieve controllability of risks while minimizing risks and regulated. [0003] Most of the vulnerability management systems in the prior art can only provide basic vulnerability management capabilities at present, and cannot meet the requirements for many problems in actual business operations: [0004] 1) In terms of asset sorting, the method of internal scanning + manual input and supplement is adopted. It is impossible to accurately locate public network assets. Because of the particularity of the public network, it cannot adapt to the method of asset scanning...

AI Technical Summary

Problems solved by technology

[0008] The embodiment of the present invention provides a vulnerability management system and method to solve the problems in the prior art that all assets cannot be fully discovered, and the efficiency of vulnerability management is relatively low and cannot be processed in combination with actual business

Images