Vulnerability scanning method, device and distributed vulnerability scanning system

By using the main message queue and the sub message queue in the distributed vulnerability scanning system, combined with the speed limit control of the token bucket algorithm, the problem of speed and concurrency limit in vulnerability scanning is solved, and efficient and accurate scanning speed limit and high concurrency capabilities are achieved.

CN114510358BActive Publication Date: 2025-03-21BEIJING KINGSOFT CLOUD NETWORK TECH CO LTD
2 Cites 0 Cited by

Patent Information

Application Number
CN202210063126.8
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2022-01-19
Publication Date
2025-03-21
Estimated Expiration
2042-01-19

AI Technical Summary

Technical Problem

In vulnerability scanning scenarios, how to achieve accurate and real-time rate limits and concurrency limits while taking into account scanning efficiency, avoiding load pressure on online services and exposing your own goals.

Method used

By configuring the main message queue and the sub-message queue in the distributed vulnerability scanning system, the main coroutine and the sub-coroutine respectively handle the scanning task and speed limit logic, and the token bucket algorithm is used for speed limit control to ensure that the scan request is executed within the set rate.

Benefits of technology

It realizes a finer-grained scanning speed limit, which can more accurately control the scanning rate, avoid load pressure on online services, and supports greater scanning concurrency, reducing the overhead of thread scheduling.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

The embodiment of the present invention relates to a vulnerability scanning method, device and distributed vulnerability scanning system. The method is applied to any scanning node in the distributed vulnerability scanning system. The distributed vulnerability scanning system includes multiple scanning nodes, a task scheduling center, and a main message queue. The task scheduling center sends a scanning task to the main message queue. The scanning task includes at least one scanning target, and the scanning target includes at least one scanning object. The method includes: reading the scanning object from the main message queue through a first main coroutine; writing a scanning request for indicating a vulnerability scan for the scanning object into a sub-message queue corresponding to the first scanning target to which the scanning object belongs; and speed-limiting the scanning request in the sub-message queue corresponding to the second scanning target bound to the first main coroutine through the first main coroutine including a first sub-coroutine. The scanning speed limit with the scanning target as the granularity can be realized, the accuracy of the scanning speed limit can be improved, and the distributed parallel speed limit can be realized.
Need to check novelty before this filing date? Find Prior Art