Newly increasing automatic discovering and rapid vulnerability scanning method for cloud platform instance hosts

Abstract

The invention relates to a newly increasing automatic discovering and rapid vulnerability scanning method for cloud platform instance hosts. The method comprises the steps of obtaining a cloud API ora cloud instance assert host IP address range and obtaining instance host IP addresses through a cloud instance asset discovering module, detecting survival statuses of instance hosts by a survival status identification module through script pins, and calling a vulnerability scanning module if the instance hosts survive; starting all-port scanning confirmation if the instant hosts are equipped with security groups or ping functions of the instance hosts are forbidden, terminating circulation if the instance hosts do not survive, calling the vulnerability scanning module for scanning, triggering a mail sending module if the scanning is normal, and sending a scanning result to a manager after generalization is carried out; and triggering scanning of abnormal mails if the scanning is abnormal, carrying out secondary scanning confirmation through pre-judgment of the manager, and moreover, recording script abnormities and an analysis process by a log processing module. Instance assert newlyincreasing, discovering, vulnerability warning and strengthening are operated and maintained efficiently, securely and automatically.

Description

technical field [0001] The invention relates to a discovery and vulnerability scanning method of a cloud platform instance host, in particular to a newly added automatic discovery and fast vulnerability scanning method of a cloud platform instance host. Background technique [0002] Cloud computing business expansion is convenient, safe and reliable, and the overall maintenance cost is low, making more and more small and medium-sized Internet companies choose cloud platforms as their data centers. In the environment of rapid business promotion and geometric data growth, the cloud platform needs to add a large number of instance hosts all the time. When encountering business promotion activities, it is very common to dynamically add hundreds of instance hosts within a few hours Phenomenon. [0003] With the rapid growth of business, the usual way to ensure the security of cloud platform instance hosts is to first add a large number of instance hosts, then sort out the newly ...

AI Technical Summary

Problems solved by technology

[0004] The purpose of the present invention is to address the defects in the existing technical means, and propose a method for automatic discovery of new cloud platform instance hosts and automatic fast vulnerability scanning, so that the lagging work of security operation and maintenance can be extended in advance, through advanced security scanning and vulnerability detection And reinforcement processing, to solve the shortcomings of the obvious lag in security caused by the rapid creation of instance hosts due to rapid business development

Images