Vulnerability matching method, device, computer equipment and readable storage medium

By calculating the similarity of vulnerabilities in multiple dimensions and comprehensively making judgments, the problem that the same vulnerability in different vulnerabilities is solved, and a more accurate vulnerability matching and effective correlation between libraries is achieved.

CN112528294BActive Publication Date: 2025-03-25QI-ANXIN LEGENDSEC INFORMATION TECH (BEIJING) INC +1
5 Cites 0 Cited by

Patent Information

Application Number
CN202011521687.5
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2020-12-21
Publication Date
2025-03-25
Estimated Expiration
2040-12-21

AI Technical Summary

Technical Problem

Since different vulnerability libraries use different standards and numbering methods, the same vulnerability is regarded as different vulnerabilities in different libraries, making it difficult to achieve accurate vulnerability matching.

Method used

By obtaining the vulnerability information of the two vulnerabilities to be matched, calculate their similarity in multiple dimensions (such as semantic similarity, description similarity, version similarity, URL similarity and title similarity), and judge whether the match is matched based on the comprehensive similarity.

Benefits of technology

It achieves more accurate vulnerability matching, can establish effective vulnerability associations between different vulnerability libraries, and improves the utilization efficiency of vulnerability libraries.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

The present application provides a vulnerability matching method, apparatus, computer device and readable storage medium. The vulnerability matching method comprises: obtaining vulnerability information of two vulnerabilities to be matched; calculating the similarity of the two vulnerabilities in multiple dimensions according to the vulnerability information; calculating the comprehensive similarity of the two vulnerabilities according to the similarity in multiple dimensions; and judging whether the two vulnerabilities match according to the comprehensive similarity. Through the present application, more accurate vulnerability matching can be achieved.
Need to check novelty before this filing date? Find Prior Art