Vulnerability scanning method and device

Abstract

The invention discloses a vulnerability scanning method and device. The method comprises the steps of obtaining a configuration snapshot of information assets according to a preset strategy; processing the configuration snapshot to obtain asset information contained in the configuration snapshot; and comparing the asset information with corresponding data in a national information security vulnerability library, and determining whether the information assets have vulnerabilities. According to the method and device, the specific asset information of the information assets is determined throughthe configuration snapshots of the information assets, the accuracy is higher compared with asset information detected by a traditional scanning engine from online equipment, the problem that vulnerability scanning cannot be conducted in the production environment can be solved in the mode that the configuration snapshots are scanned, and the timeliness of vulnerability scanning is improved whilethe vulnerability scanning risk in a production environment is avoided.

Description

technical field [0001] The present invention relates to security inspection technology, more specifically, to a vulnerability scanning method and device. Background technique [0002] For information assets, it is necessary to perform vulnerability scanning on a regular basis or as needed, to screen information assets for vulnerabilities in a timely manner, and to deal with real vulnerabilities accordingly. [0003] The current vulnerability scanning for information assets usually detects the characteristics of information assets of online devices through scanning engines, such as hardware attributes, configuration attributes, software attributes, etc., and then compares them with the entities affected by vulnerabilities to determine a certain information Whether there is a vulnerability on the asset. [0004] However, there are two problems in the above-mentioned vulnerability scanning method. One is that the accuracy of the information assets detected by the scanning engi...

AI Technical Summary

Problems solved by technology

[0004] However, there are two problems in the above-mentioned vulnerability scanning method. One is that the information assets detected by the scanning engine from online devices are not accurate enough, which leads to errors in the vulnerability scanning results; The scanning will inevitably bring additional load to the scanned device, especially in the production system, it may cause the device to scan down and affect the normal operation of the device

Images