Information network unified vulnerability multi-dimensional security intelligence collection, analysis and management system

Abstract

The invention discloses an information network unified vulnerability multi-dimensional security intelligence collection, analysis and management system. The system comprises an intelligence data collection module, a manual identification module, a simulation test module, an input solution module, an input information standardization module and a vulnerability intelligence information base module. According to the information network unified vulnerability multi-dimensional security intelligence collection, analysis and management system, for collected original security intelligence, firstly, manual identification is carried out, credibility and possible harmfulness of the original security intelligence are preliminarily evaluated, then the security intelligence is submitted to the simulation test system module for test verification, and a general solution is given, so that a solution is provided for subsequent repair or reinforcement inpu. After the original security intelligence is analyzed and verified, the intelligence, the solution and other achievement information are normalized to form a vulnerability intelligence information specification required by the system, and the vulnerability intelligence information specification is stored in a vulnerability intelligence information base, so that the vulnerability intelligence information is convenient to use or manage by the system.

Description

technical field [0001] The invention relates to the technical field of information network security, in particular to an information network unified vulnerability multi-dimensional security intelligence collection, analysis and management system. Background technique [0002] As the country's requirements for network information security become more and more comprehensive, many units have deployed a variety of network information security equipment to improve their network security protection level, strengthen their own network security protection, and improve their own network security management level. The objects of intelligence data analysis in the field of network information security are generally the protection logs and traffic of various network security devices. Scan result information, WEB application security information, etc. The processing of these information follows the three main stages of data collection, data storage, and data analysis. [0003] The state...

AI Technical Summary

Problems solved by technology

[0005] Aiming at the deficiencies in the prior art, the present invention provides a multi-dimensional security intelligence collection, analysis and management system for information network unified vulnerabilities, which can solve the data collection, analysis, processing, and post-processing of the existing information network unified vulnerabilities and multi-dimensional security intelligence collection, analysis and management system. Inconvenient management

Images