Vulnerability scanner and plug-in scheduling method thereof

Abstract

The invention belongs to the field of network security, in particular to a vulnerability scanner and a plug-in scheduling method thereof. The method comprises the following steps that: starting the vulnerability scanner, and identifying whether a target to be scanned is a host or network security equipment after a vulnerability scanning task is received; if the target to be scanned is the host, detecting the operating system of the host and a deployed service type, and selecting a preset scanning module according to the operating system and the service type; and if the target to be scanned isthe network security equipment, detecting the system type and the equipment type of the network security equipment, selecting a preset scanning module, and calling a plug-in recorded in the selected scanning module. The invention also discloses a scanner. On the basis of the above operating system type of the host, the service type or the operating system type and the equipment type of the networkequipment, the corresponding plug-in module can be selected and called, then, the corresponding plug-in is loaded into memory, and finally, the plug-in in the memory is read to be executed. Therefore, memory space is saved, and scanning speed is quickened.

Description

technical field [0001] The invention belongs to the field of network security, and in particular relates to a vulnerability scanner and a plug-in scheduling method thereof. Background technique [0002] With the deepening of enterprise informatization, computer network plays an increasingly important role in the enterprise. However, due to the typical interconnection and openness of the Internet, the internal computer network system of an enterprise is extremely easy to become the target and carrier of malicious attacks. How to better protect the computer network security within the enterprise is also being valued by more and more enterprises. [0003] Network vulnerability scanning plays an increasingly important role in ensuring network security. With the help of network vulnerability scanning, people can find open ports, services provided, certain system information, wrong configurations, known security vulnerabilities, etc. in the network and hosts. In the face of Int...

AI Technical Summary

Problems solved by technology

[0005] In order to solve the technical problem in the prior art that loading many plug-ins into the memory at one time will take up a lot of time and memory capacity, and the hardware configuration may not be able to meet the growth rate of the plug-ins, resulting in a very slow scanning speed, the present invention provides a The database audit method is specifically implemented through the following technical solutions:

Images