Method and device for evaluating security vulnerability processing priority

Abstract

The invention provides a method and device for evaluating the processing priority of security vulnerabilities, the method is applied to evaluating the processing priority of the security vulnerabilities in an enterprise intranet, and the method comprises the following steps: obtaining the risk level of a to-be-evaluated security vulnerability; obtaining an exposure path risk level of the target carrier; obtaining a target port opening coefficient; and determining the processing priority of the to-be-evaluated security vulnerability according to the self risk level, the exposure path risk level and the target port opening coefficient. When the method is used for evaluating the processing priority of the security vulnerability, not only is the risk level of the vulnerability considered, but also the exposure path risk level of the target carrier where the security vulnerability is located in the network structure of each enterprise intranet and the port opening condition of the security vulnerability on the target carrier are considered. Therefore, a network administrator can focus on forming the security vulnerability with the maximum risk for the network, so that the possibility that the network is attacked is reduced.

Description

technical field [0001] The present application relates to the technical field of network security, and in particular to a method and device for evaluating security vulnerability processing priorities. Background technique [0002] A security hole is a defect in the specific implementation of hardware, software, protocol, or system security policy, which allows an attacker to access or destroy the system without authorization. Usually behind a major cyber attack, there are one or more unfixed vulnerabilities. Therefore, timely and accurate handling of security vulnerabilities is crucial to identifying and reducing network risks. [0003] Network administrators use vulnerability scanning tools to scan the corporate network to obtain information about security vulnerabilities in the corporate intranet, and then repair the security vulnerabilities. However, with the expansion and diversification of the network, the number of vulnerabilities detected by vulnerability scanning t...

AI Technical Summary

Problems solved by technology

[0005] In order to solve the prior art when assessing the processing priority of security vulnerabilities, only considering the technical risks that may be introduced by security vulnerabilities, ignoring the importance of the carrier where the security vulnerabilities are located, the network area, open ports, exposed surfaces and many other factors, resulting in network The administrator fails to focus on the security vulnerability that poses the greatest risk to the network when dealing with the security vulnerability. This application provides a method and device for evaluating the priority of security vulnerability processing through the following aspects

Images