Vulnerability scanning method, server and system
a vulnerability scanning and server technology, applied in the field of internet technology, can solve the problems of increasing prominence of information security on the internet, major limitation of vulnerability scanning method, and inapplicability of customized scanning content, so as to improve the efficiency of vulnerability scanning, comprehensive scanning process, and the effect of spotting possible vulnerabilities in the specified host servi
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Benefits of technology
Problems solved by technology
Method used
Image
Examples
embodiment 1
[0017]The technical solutions provided by the present disclosure may be applied to a system architecture shown in FIG. 1. Referring to FIG. 1, the system architecture may include a server, a task scheduling center, and a proxy node. The server may be configured to create a scan task for vulnerability scanning, the task scheduling center may receive a scan task issued by the server, and the proxy node may acquire a scan task from the task scheduling center, execute the acquired scan task for the corresponding host to obtain a scan result related to the host. The scan result may be reported by the proxy node to the server.
[0018]In the present disclosure, the system architecture may be deployed in a manner of a distributed system. There may be a plurality of proxy nodes. Each proxy node may be connected to the task scheduling center. Some proxy nodes may obtain different scan tasks for the same host, and these proxy nodes may execute the acquired scan tasks in parallel, thereby improvi...
embodiment 2
[0038]Referring to FIG. 4, the present disclosure further provides a server. The server comprises a memory and a process, where the memory stores computer programs that, when executed by the processor, implement the following steps:
[0039]S11: identifying a host service running on a target host and creating a scan task that matches the identified host service;
[0040]S13: issuing the created scan task to a task scheduling center, to allow a proxy node to acquire at least one scan task from the task scheduling center, where the proxy node executes the at least one scan task for the target host, and obtains a scan result; and
[0041]S15: receiving the scan result fed back by the proxy node, determining whether there exists a specified host service in the identified host service, where the specified host service signifies an existence of a web site resource running on the target host, and if there exists the specified host service in the identified host service, issuing again a scan subtask...
embodiment 3
[0048]Referring to FIG. 1 and FIG. 5, the present disclosure further provides a vulnerability scanning system. The system comprises a server, a task scheduling center, and a proxy node, where:
[0049]the server is configured to identify a host service running on a target host, create a scan task that matches the identified host service, issue the created scan task to a task scheduling center, determine whether there exists a specified host service in the identified host service, where the specified host service signifies an existence of a website resource running on the target host, if there exists the specified host service in the identified host service, issue again a scan subtask corresponding to the specified host service to the task scheduling center, and receive a scan result fed back by the proxy node;
[0050]the task scheduling center is configured to receive the scan task or scan subtask issued by the server, and place the received scan task or scan subtask in a task queue; and...
PUM
Login to View More Abstract
Description
Claims
Application Information
Login to View More