Heterogeneous Redundant Intranet Vulnerability Database Update Method and System

Abstract

The invention belongs to the technical field of network security, and particularly relates to a method and system for updating a heterogeneous redundant intranet vulnerability database. Two heterogeneous anti-virus servers for running different operating systems; through the heterogeneous anti-virus servers in the isolated area, the virus detection and killing of the vulnerability database files obtained from the external network are performed and arbitrated; the security vulnerability database files are obtained according to the results of the virus detection and arbitration arbitration And transmit it to the intranet to update the vulnerability library of the intranet vulnerability scanning system. The invention uses the isolated area to connect with the external network and the internal network respectively, and transmits the automatically obtained vulnerability library files from the external network to the internal network in an isolated environment, so as to realize the automatic and safe update of the internal network vulnerability database and simplify the cumbersome manual ferry update Steps to improve the efficiency of the update of the intranet vulnerability database have important guiding significance for the security of the intranet network.

Description

technical field [0001] The invention belongs to the technical field of network security, in particular to a method and system for updating a heterogeneous redundant intranet vulnerability database. Background technique [0002] For the isolated internal network vulnerability scanning system, its vulnerability database must be imported from the outside. The fact that the number of updated vulnerabilities is huge makes it quite cumbersome to manually import the vulnerability database each time. Many internal network servers with a high level of security and confidentiality are not only isolated from the external network, but also allow one-way data flow between the internal network and the external network by burning CDs in order to prevent ferrying attacks caused by viruses, Trojan horses, and worms, etc. . Vulnerability scanning software is deployed in an isolated internal network, but the vulnerability update service in the vulnerability scanning software cannot automatica...

AI Technical Summary

Problems solved by technology

The anti-virus software in the isolation area is single, and will follow the ferry files to introduce harmful files such as viruses, Trojans, and worms, which will threaten the security of the intranet network to a certain extent

Images