Extensible network security vulnerability monitoring method and system, terminal and storage medium

Abstract

The invention provides an extensible network security vulnerability monitoring method and system, a terminal and a storage medium, and the method comprises the steps: storing a detection script imported by a user in a script library, executing a newly-added script of the script library, and formulating a filtering rule according to an execution result; storing the filtering rule, the vulnerability type corresponding to the filtering rule and the attack effect of the corresponding vulnerability type into a rule base; calling a filtering rule in the rule base to detect the target data; and if it is detected that the target data has the vulnerability, outputting a corresponding vulnerability type and an attack effect according to a filtering rule for detecting the target data. The invention is based on an active vulnerability detection model, extensible design is achieved, multi-language writing of vulnerability detection programs is supported, the method can be reused by similar vulnerabilities, autonomous early warning can be achieved after the vulnerabilities are found, and the vulnerability mining and repairing capacity of staff is brought into full play.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to an expandable network security loophole monitoring method, system, terminal and storage medium. Background technique [0002] In recent years, attacks on computer network information systems in the electric power industry and the resulting information security incidents have shown a rapid growth trend, and have been highly valued by the electric power industry. [0003] In order to improve the network security of the power industry, network security equipment such as vulnerability scanning equipment, audit equipment, and Internet behavior management are arranged in the network system. However, existing vulnerability scanning network security devices are limited by the intranet environment and cannot update the scanning template in time. At the same time, because the equipment does not have a scalable design, it is impossible to manually write automated monitoring script...

AI Technical Summary

Problems solved by technology

However, existing vulnerability scanning network security devices are restricted by the intranet environment, and cannot update the scanning template in time

At the same time, because the equipment does not have a scalable design, it is impossible to manually write automated monitoring scripts, and it is impossible to give full play to the subjective initiative of company employees. The fixed passive scanning mechanism can no longer adapt to the current changing network environment, and new vulnerabilities emerge in endlessly. Traditional vulnerability scanning equipment only Support fixed module scanning, which can no longer keep up with the needs of new forms of development

Images