Vulnerability management system based on network assets

Abstract

The invention discloses a vulnerability management system based on network assets. The system comprises a vulnerability library module, a vulnerability information display module, a vulnerability retrieval module, a vulnerability library updating module and a vulnerability library exporting module; wherein the vulnerability library module classifies the detected vulnerability information; the vulnerability information display module displays specific vulnerability information under three different classifications of CNNVD, CNVD and CVE; the vulnerability retrieval module performs HTML (Hypertext Markup Language) analysis and arrangement on the screened information; the vulnerability library updating module stores the obtained useful information in a MongoDB database; the increment detection module completes increment update detection; the vulnerability library export module exports vulnerabilities. According to the method, automatic detection is performed on the network assets through the Scrapy framework, so that excessive dependence on manual detection is avoided; and then the network assets are continuously detected, and the vulnerability library is updated in time, so that the hysteresis of the database is effectively avoided, and meanwhile, the vulnerability information is favorably exported from the MongoDB database and is analyzed, and the security threat is solved.

Description

technical field [0001] The invention belongs to the computer field and relates to a vulnerability system, in particular to a network asset-based vulnerability management system. Background technique [0002] With the rapid development of network technology, the combination of computer network and asset information system can realize paperless office and effectively improve work efficiency. However, while network technology brings convenience to people, security issues in various network and asset information systems are gradually exposed. At present, network asset systems mainly rely on manual processing to discover and deal with loopholes. With the increasing complexity of network asset systems , the types of assets are becoming more and more diverse, and system maintenance is becoming more and more difficult. Attackers take advantage of this opportunity to invade the system, tamper with pages and even obtain important asset data, resulting in information leakage and threat...

AI Technical Summary

Problems solved by technology

However, while network technology brings convenience to people, security issues in various network and asset information systems are gradually exposed. At present, network asset systems mainly rely on manual processing to discover and deal with loopholes. With the increasing complexity of network asset systems , the types of assets are becoming more and more diverse, and system maintenance is becoming more and more difficult. Attackers take advantage of this opportunity to invade the system, tamper with pages and even obtain important asset data, resulting in information leakage and threatening the normal operation of the entire company.

Images