Loophole finding and emergency verification implementation method

Abstract

The invention relates to a loophole finding and emergency verification implementation method comprising the five steps of system formation setting, loophole detection system configuration, loophole detection, loophole elimination and system upgrade. On the one hand, the system is simple in formation, flexible in structure adjustment, and capable of effectively meeting the risk loophole detection,assessment and pre-warning of the different network systems and contents; on the other hand, the data compatibility capacity is strong, the data detection operation efficiency and accuracy are high, various vulnerability risks in the network can be efficiently detection all around, the professional and effective security analysis and repair advice are provided, auditing is performed on a repair result through fitting with the security management process, the attack surface is furthest reduced, and thus the efficiency and security of the network data management operation are greatly improved.

Description

Technical field [0001] The invention relates to a method for realizing loophole discovery and emergency verification, and belongs to the technical field of network security. Background technique [0002] The Internet security problem of using security vulnerabilities to carry out network attacks is like a shadow under the sun, which has always been accompanied by the application development of the Internet industry. In recent years, the form of network security threats has also changed in different ways. The attack mode has changed from simple tool attacks that a single hobbyist can download at will to an attack program specially written by organized professional and technical personnel. The purpose of the attack has changed from proving personal technology. Power shifts to commercial or national information theft. [0003] Changes in new attack methods will still exploit various vulnerabilities, such as the IE browser overflow vulnerability used in the Google Aurora attack, and t...

AI Technical Summary

Problems solved by technology

The work of this process is extremely cumbersome, and traditional vulnerability scanning products are no longer competent in terms of vulnerability inspection coverage and the effectiveness of analysis reports to help managers

Images