Network asset management and loophole handling system

Abstract

The invention relates to a network asset management and loophole handling system, comprising a network asset information collection subsystem, wherein the network asset information collection subsystem comprises a basic information collection module, an application component fingerprint collection module, a vulnerability perceptive module and a loophole handling and repairing tool module; the basic information collection module finds a networked host and carries out fingerprint identification on an operating system of the host, so as to detect a type of the operating system of a remote targethost; the application component fingerprint collection module finds one kind or multiple kinds of fingerprint information, including versions, service ports and protocol interaction features of network application programs or components, of the network application programs or components; the vulnerability perceptive module carries out perception and analysis on vulnerability of an application system and the networked host and finds possible loopholes in the networked host as well as a system, services and application components thereof; and the loophole handling and repairing tool module carries out loophole handling and / or repairing on the found loopholes in the networked host as well as the system, services and application components thereof by virtue of a loophole handling personnel operation and / or automatic operation way. The network asset management and loophole handling system provided by the invention can rapidly and accurately find and timely repair security loopholes of an information system.

Description

technical field [0001] The invention relates to information asset security, in particular to a network asset management and vulnerability management system. Background technique [0002] Information system cyberspace is composed of numerous nodes, each node is an IT asset (or information asset) connected to the network, and information assets include host operating systems, network devices, security devices, databases, middleware, and application components. Information assets are the most basic and important carrier in information security management. With the continuous growth of the internal business of the enterprise and the rapid development of business informatization, various business support platforms and management systems are becoming more and more complex. As the resources become richer and richer, the asset management work brought to administrators becomes more and more difficult. Over time, a large number of unowned assets and zombie assets have been generated...

AI Technical Summary

Problems solved by technology

[0008] The information of information assets is not fully grasped, and it is difficult to find and repair vulnerabilities in a timely and accurate manner

Images