A vulnerability data processing method and device

Abstract

The embodiment of the present invention provides a vulnerability data processing method and device, the method comprising: receiving the item to be tested input by the user on the interactive page of the vulnerability data processing platform; extracting the original state information of the item to be tested; The visual page of the vulnerability data processing platform shows the original status information of the item to be tested; when the item to be tested starts testing, the current status information of the item to be tested is generated; The project determines the corresponding vulnerability information; generates a test report according to the vulnerability information, and displays the test report on the interactive page. It solves the technical problem that a large number of items to be tested and their vulnerabilities cannot be managed uniformly in the prior art, realizes the transparency of the test task process, improves management efficiency, and reduces the consumption of processing resources.

Description

technical field [0001] The invention relates to the field of computer network information security, in particular to a vulnerability data processing method and device. Background technique [0002] At present, information technology is in a stage of rapid development, and the level of financial information application is gradually improving. While the business activities of financial institutions are constantly integrating with the Internet, financial institutions themselves are also facing increasingly severe security challenges. Among them, the security issues of various web applications are very easy to appear in the scene of complicated business, scattered information, and complicated personnel. Huge financial institutions are not only difficult to carry out unified risk management, but once a security incident occurs, the harm and impact will be huge, resulting in unpredictable losses. [0003] Most of the existing vulnerability data processing methods and vulnerabili...

AI Technical Summary

Problems solved by technology

For example, vulnerability scanning relies on corresponding scanning equipment and tools to conduct vulnerability scanning, and the results are not accurate enough. If it is directly included in the scope of vulnerability data processing, the vulnerability data will have great deviations, which cannot meet the requirements of large-scale routines. Vulnerability data processing for project security testing

[0004] However, the existing vulnerability data processing mode is still in the stage of manual analysis, processing and manual management. It takes a lot of manpower to store and analyze each vulnerability corresponding to each project in the later stage, and tests such as conventional security testing or penetration testing generally require Manual report writing required

Low management efficiency, high resource consumption and high cost

Images