Vulnerability detection method, vulnerability detection model and vulnerability detection device

Abstract

The embodiment of the invention provides a vulnerability detection method, a vulnerability detection model and a vulnerability detection device. The vulnerability detection method comprises the following steps: identifying an asset fingerprint of a to-be-scanned target asset; according to the asset fingerprint of the to-be-scanned target asset, determining a vulnerability detection plug-in needing to be started; determining vulnerability detection logic needing to be started in the vulnerability detection plug-in needing to be started; and detecting the asset fingerprint through the determined vulnerability detection logic needing to be started, and outputting the vulnerability corresponding to the asset fingerprint when the vulnerability exists. According to the method and the device, the vulnerability detection plug-ins are intelligently distributed and the corresponding vulnerability detection logic is dynamically scheduled in the vulnerability detection process, only effective vulnerability detection is performed, the addition of invalid vulnerability detection is avoided, and the vulnerability detection efficiency is improved.

Description

technical field [0001] The embodiments of the present invention relate to the technical field of vulnerability detection, and in particular to a vulnerability detection method and a vulnerability detection model. Background technique [0002] Vulnerability scanning tools are widely used today. The traditional vulnerability detection model generally performs fingerprint identification on all assets, then verifies all fingerprints and all vulnerability detection rules one by one, and finally outputs the verification results. However, with the increasing amount of assets and information, there are more and more fingerprints, and there are more and more vulnerability detection rules, which means that the detection methods of traditional vulnerability detection tools also simultaneously expose more problems. At present, the traditional detection methods mainly have the following defects: the increase of fingerprints makes scanning target assets more time-consuming; as the vulner...

AI Technical Summary

Problems solved by technology

However, with the increasing amount of assets and information, there are more and more fingerprints and more and more vulnerability detection rules, which means that the detection methods of traditional vulnerability detection tools also simultaneously expose more problems

At present, the traditional detection method mainly has the following defects: the increase of fingerprints makes scanning target assets more time-consuming; as the vulnerability detection rules continue to increase, for the same number of assets, scanning takes longer and longer

Images