Vulnerability closed-loop processing method and system based on vulnerability scanning

Abstract

The invention discloses a loophole closed-loop processing method and system based on loophole scanning, and relates to the technical field of loophole processing, and the method comprises the following steps: 1, scanning the asset of a user based on a fixed period, obtaining the asset information of the user, carrying out the loophole scanning of the asset information of the user, and obtaining the loophole information of the user; generating a vulnerability scanning record after each scanning; 2, sorting vulnerability processing priorities of subsequent users on the basis of vulnerability scanning records; and step 3, adjusting the fixed period of the user asset vulnerability based on the vulnerability scanning record, sorting the vulnerability processing priorities of subsequent users according to the vulnerability scanning record by setting a closed-loop processing module, and on the basis of ensuring the full-period closed-loop processing of the vulnerability, improving the vulnerability processing efficiency. A reasonable vulnerability processing sequence is customized for asset vulnerabilities of different users.

Description

Technical Field

[0001] The present invention relates to the technical field of vulnerability processing, and more specifically, to a vulnerability closed-loop processing method and system based on vulnerability scanning. Background Art

[0002] Vulnerabilities are defects in the specific implementation of hardware, software, protocols, or system security policies, which can allow attackers to access or damage the system without authorization. The current vulnerability handling system is not very targeted in the management and repair of vulnerabilities, and the vulnerability management standards for all users are the same. When multiple types of vulnerabilities appear in user assets at the same time, the current vulnerability handling system will repair different types of vulnerabilities at the same time, resulting in high pressure on the vulnerability management and repair methods, which is prone to system crashes. Summary of the invention

[0003] In view of the deficiencies in the prior art, the object of the present invention is to provide a vulnerability closed-loop processing method and system based on vulnerability scanning.

[0004] To achieve the above object, the present invention provides the following technical solutions:

[0005] A vulnerability closed-loop processing method based on vulnerability scanning includes the following steps:

[0006] Step 1: Scan the user's assets based on a fixed period, obtain the user's asset information, perform vulnerability scans on the user's asset information, and generate vulnerability scan records after each scan;

[0007] Step 2: Sort the vulnerability handling priorities of subsequent users based on the vulnerability scanning records;

[0008] Step 3: Adjust the fixed period of user asset vulnerabilities based on vulnerability scanning records.

[0009] Further, a vulnerability closed-loop processing system based on vulnerability scanning includes a vulnerability scanning module, a closed-loop processing module, and a scanning adjustment module;

[0010] The vulnerability scanning module is used to scan the user's assets based on a fixed period, obtain the user's asset information, perform vulnerability scanning on the user's asset information, and generate a vulnerability scanning record after each scan;

[0011] The closed-loop processing module is used to process the scanned vulnerability types in sequence, specifically:

[0012] Obtain all vulnerability scan records of the user before the current time of the system, mark vulnerability scan records with the same vulnerability type as similar vulnerability records, sort all similar vulnerability records in the order of vulnerability scan time, calculate the time difference between the vulnerability scan times of two adjacent similar vulnerability records after sorting, obtain similar vulnerability intervals, set each similar vulnerability interval to correspond to a standard vulnerability interval, when the similar vulnerability interval is less than the standard vulnerability interval, mark the similar vulnerability interval as a high-frequency vulnerability interval, and obtain a high-frequency vulnerability value Fp, when the similar vulnerability interval is greater than or equal to the standard vulnerability interval, mark the similar vulnerability interval as a common-frequency vulnerability interval, and obtain a common-frequency vulnerability value Dq, obtain a closed-loop repair value Rw of this type of vulnerability, sort all vulnerability types from large to small according to the numerical value of the closed-loop repair value Rw, and after performing vulnerability scanning on user asset information in the next fixed period, process the scanned vulnerability types in the sorted order;

[0013] The scanning adjustment module is used to adjust the fixed period of scanning user asset vulnerabilities, specifically:

[0014] All vulnerability scanning records of the user before the current time of the system are obtained, and a threshold value for the number of vulnerability types is set. When the number of vulnerability types in the vulnerability scanning record is ≥ the threshold value for the number of vulnerability types, the vulnerability scanning record is marked as a crisis scanning record, and a crisis scanning value Bc is obtained. When the number of vulnerability types in the vulnerability scanning record is < the threshold value for the number of vulnerability types, the vulnerability scanning record is marked as a normal scanning record, and a normal scanning value Wb is obtained. A scanning adjustment value Sy is obtained, and a high scanning adjustment value is set to Cp, and a low scanning adjustment value is set to Ea. When the scanning adjustment value Sy is ≥ the high scanning adjustment value Cp, a fixed period for the vulnerability scanning module to scan the user's assets is shortened. When the low scanning adjustment value Ea is ≤ the scanning adjustment value Sy < the high scanning adjustment value Cp, no processing is performed. When the scanning adjustment value Sy < the low scanning adjustment value Ea, a fixed period for the vulnerability scanning module to scan the user's assets is extended.

[0015] Furthermore, the vulnerability scanning record includes the number of vulnerability types and vulnerability scanning time.

[0016] Furthermore, the high-frequency vulnerability value Fp is obtained by the following steps: calculating the difference between the standard vulnerability interval and the high-frequency vulnerability interval to obtain the high-frequency interval difference, summing up all the high-frequency interval differences to obtain the total high-frequency interval difference, and marking it as Wk, obtaining the total number of times the same type of vulnerability interval is marked as a high-frequency vulnerability interval, and marking it as Hs, and using the formula Fp=Wk×a1+Hs×a2 to obtain the high-frequency vulnerability value Fp, wherein a1 is the high-frequency interval total difference coefficient, and a2 is the high-frequency vulnerability number coefficient.

[0017] Furthermore, the common frequency vulnerability value Dq is obtained by the following steps: calculating the difference between the common frequency vulnerability interval and the standard vulnerability interval to obtain the common frequency interval difference, summing up all the common frequency interval differences to obtain the total common frequency interval difference, and marking it as Ty, obtaining the total number of times the same type of vulnerability interval is marked as the common frequency vulnerability interval, and marking it as Sn, and using the formula Dq=Ty×b1+Sn×b2 to obtain the common frequency vulnerability value Dq, wherein b1 is the common frequency interval total difference coefficient, and b2 is the common frequency vulnerability number coefficient.

[0018] Furthermore, the closed-loop repair value Rw is obtained by the following steps: the total number of vulnerability scan records of the user before the current system time is obtained and marked as Lb, the total number of vulnerability records of the same vulnerability type of the user before the current system time is obtained and marked as Mz, and the formula is used to calculate the total number of vulnerability scan records of the user before the current system time. The closed-loop repair value Rw of this type of vulnerability is obtained, where c1 is the vulnerability scan quantity coefficient, c2 is the same type of vulnerability quantity coefficient, c3 is the high-frequency vulnerability value coefficient, and c4 is the general frequency vulnerability value coefficient.

[0019] Further, the crisis scan value Bc is obtained by the following steps: the difference between the number of vulnerability types in the crisis scan record and the threshold of the number of vulnerability types is calculated to obtain the crisis vulnerability difference, all the crisis vulnerability differences are summed up and averaged to obtain the crisis vulnerability average difference, which is marked as Gz, all the crisis scan records are sorted in the order of the vulnerability scan time, the time difference between the two adjacent vulnerability scan times after sorting is calculated to obtain the crisis scan interval, all the crisis scan intervals are summed up and averaged to obtain the crisis scan average interval, which is marked as Ue, and the formula is used. The crisis scanning value Bc is obtained, where d1 is the crisis vulnerability mean difference coefficient and d2 is the crisis scanning mean interval coefficient.

[0020] Furthermore, the common scan value Wb is obtained by the following steps: performing a difference calculation between the vulnerability type number threshold and the vulnerability type number of the common scan record to obtain a common vulnerability difference, summing up all common vulnerability differences and taking the average value to obtain a common vulnerability average difference, which is marked as Fe, sorting all common scan records in the chronological order of vulnerability scan time, calculating the time difference between two adjacent vulnerability scan times after sorting, obtaining a common scan interval, summing up all common scan intervals and taking the average value to obtain a common scan average interval, which is marked as Jt, and using the formula The normal scanning value Wb is obtained, where e1 is the normal vulnerability average difference coefficient and e2 is the normal scanning average interval coefficient.

[0021] Further, the scanning adjustment value Sy is obtained by the following steps: the scanning adjustment value Sy is obtained by using the formula Sy=Bc×z1-Wb×z2, wherein z1 is the crisis scanning value coefficient, and z2 is the normal scanning value coefficient.

[0022] Compared with the prior art, the present invention has the following beneficial effects:

[0023] 1. By setting up a closed-loop processing module, the vulnerability processing priorities of subsequent users can be sorted according to the vulnerability scanning records. On the basis of ensuring the closed-loop processing of the vulnerability throughout the entire cycle, a reasonable vulnerability processing sequence can be customized for asset vulnerabilities of different users;

[0024] 2. Set up a scanning adjustment module to adjust the fixed period of scanning user asset vulnerabilities based on vulnerability scanning records. On the basis of ensuring closed-loop processing of user asset vulnerabilities, the system can reasonably allocate the scanning frequency of different user assets. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] Figure 1 It is a principle block diagram of the closed-loop processing module of the present invention;

[0026] Figure 2 This is a principle block diagram of the scanning adjustment module of the present invention. DETAILED DESCRIPTION

[0027] Example 1

[0028] Reference Figure 1 , a vulnerability closed-loop processing system based on vulnerability scanning, including a vulnerability scanning module and a closed-loop processing module.

[0029] The vulnerability scanning module is used to scan the user's assets based on a fixed period, obtain the user's asset information, perform vulnerability scanning on the user's asset information, and generate vulnerability scanning records after each scan. The vulnerability scanning record includes the number of vulnerability types and vulnerability scanning time. For example, the number of vulnerability types in vulnerability scanning record 1 of user A is 3 (types a, b, and c), and the vulnerability scanning time is 08:00:00 on July 13, 2023. The number of vulnerability types in vulnerability scanning record 2 of user A is 2 (types c and d), and the vulnerability scanning time is 08:00:00 on July 14, 2023.

[0030] The closed-loop processing module is used to process the scanned vulnerability types in sequence, specifically:

[0031] Get all vulnerability scan records of the user before the current time of the system, mark the vulnerability scan records with the same vulnerability type as the same vulnerability records (for example, mark the vulnerability scan records with vulnerability type a as the same vulnerability records), sort all the same vulnerability records in the order of vulnerability scan time, calculate the time difference between the vulnerability scan times of two adjacent same vulnerability records after sorting, get the same vulnerability interval, set each same vulnerability interval to correspond to a standard vulnerability interval, when the same vulnerability interval is less than the standard vulnerability interval, mark the same vulnerability interval as a high-frequency vulnerability interval, The high-frequency vulnerability value Fp is obtained, and the high-frequency vulnerability value Fp is obtained by the following steps: calculating the difference between the standard vulnerability interval and the high-frequency vulnerability interval to obtain the high-frequency interval difference, summing up all the high-frequency interval differences to obtain the total high-frequency interval difference, and marking it as Wk, obtaining the total number of times the same type of vulnerability interval is marked as the high-frequency vulnerability interval, and marking it as Hs, and using the formula Fp=Wk×a1+Hs×a2 to obtain the high-frequency vulnerability value Fp, wherein a1 is the high-frequency interval total difference coefficient, a2 is the high-frequency vulnerability number coefficient, the value of a1 is 0.71, and the value of a2 is 0.48. When the same type of vulnerability interval is ≥ the standard vulnerability interval, the same type of vulnerability interval is marked as a common frequency vulnerability interval, and the common frequency vulnerability value Dq is obtained. The common frequency vulnerability value Dq is obtained by the following steps: calculating the difference between the common frequency vulnerability interval and the standard vulnerability interval to obtain the common frequency interval difference, summing up all the common frequency interval differences to obtain the total common frequency interval difference and marking it as Ty, obtaining the total number of times the same type of vulnerability interval is marked as the common frequency vulnerability interval and marking it as Sn, and using the formula Dq=Ty×b1+Sn×b2 to obtain the common frequency vulnerability value Dq, where b1 is the common frequency interval total difference coefficient, b2 is the common frequency vulnerability number coefficient, the value of b1 is 0.72, and the value of b2 is 0.47. Get the closed-loop repair value Rw of this type of vulnerability. The closed-loop repair value Rw is obtained by the following steps: Get the total number of vulnerability scan records of the user before the current system time, and mark it as Lb; Get the total number of vulnerability records of the same type of vulnerability of the user before the current system time, and mark it as Mz; Use the formula The closed-loop repair value Rw of the vulnerability type is obtained, where c1 is the coefficient of vulnerability scan quantity, c2 is the coefficient of the number of similar vulnerabilities, c3 is the coefficient of high-frequency vulnerability value, and c4 is the coefficient of general frequency vulnerability value. The value of c1 is 0.42, the value of c2 is 0.37, the value of c3 is 0.85, and the value of c4 is 0.84. All vulnerability types are sorted from large to small according to the value of the closed-loop repair value Rw. After the vulnerability scan is performed on the user asset information in the next fixed period, the scanned vulnerability types are processed in the sorted order. For example, there are 5 types of vulnerabilities in total, namely, vulnerability type a, vulnerability type b, vulnerability type c, vulnerability type d, and vulnerability type e. All vulnerability types of user A are sorted into vulnerability type a, vulnerability type c, vulnerability type e, vulnerability type b, and vulnerability type d according to the value of the closed-loop repair value Rw. After the vulnerability scan is performed on the user asset information in the next fixed period, it is found that the assets of user A have vulnerability types a and b, and vulnerability type a is processed first. By setting up a closed-loop processing module, the vulnerability processing priorities of subsequent users can be sorted according to the vulnerability scanning records. On the basis of ensuring the closed-loop processing of the vulnerability throughout the entire cycle, a reasonable vulnerability processing sequence can be customized for the asset vulnerabilities of different users.

[0032] Example 2

[0033] Reference Figure 2 On the basis of Example 1, a scanning adjustment module is further included, and the scanning adjustment module is used to adjust the fixed period of scanning user asset vulnerabilities, specifically:

[0034] Get all vulnerability scan records of the user before the current time of the system, set the vulnerability type number threshold, when the vulnerability type number of the vulnerability scan record is greater than or equal to the vulnerability type number threshold, mark the vulnerability scan record as a crisis scan record, and get the crisis scan value Bc. The crisis scan value Bc is obtained by the following steps: calculate the difference between the vulnerability type number of the crisis scan record and the vulnerability type number threshold, and get the crisis vulnerability difference, sum up all the crisis vulnerability differences and take the average, and get the crisis vulnerability average difference, and mark it as Gz, sort all the crisis scan records according to the chronological order of the vulnerability scan time, calculate the time difference between the two adjacent vulnerability scan times after sorting, and get the crisis scan interval, sum up all the crisis scan intervals and take the average, and get the crisis scan average interval, and mark it as Ue, and use the formula The crisis scan value Bc is obtained, where d1 is the crisis vulnerability mean difference coefficient, d2 is the crisis scan interval coefficient, the value of d1 is 0.62, and the value of d2 is 0.57. When the number of vulnerability types in the vulnerability scan record is less than the vulnerability type number threshold, the vulnerability scan record is marked as a normal scan record, and the normal scan value Wb is obtained. The normal scan value Wb is obtained by the following steps: the difference between the vulnerability type number threshold and the number of vulnerability types in the normal scan record is calculated to obtain the normal vulnerability difference, all the normal vulnerability differences are summed and averaged to obtain the normal vulnerability mean difference, and marked as Fe, all the normal scan records are sorted in the order of the vulnerability scan time, the time difference between the two adjacent vulnerability scan times after sorting is calculated to obtain the normal scan interval, all the normal scan intervals are summed and averaged to obtain the normal scan interval, and marked as Jt, using the formula The normal scanning value Wb is obtained, wherein e1 is the normal vulnerability mean difference coefficient, e2 is the normal scanning mean interval coefficient, the value of e1 is 0.61, and the value of e2 is 0.56. The scanning adjustment value Sy is obtained, and the scanning adjustment value Sy is obtained by the following steps: the scanning adjustment value Sy is obtained by using the formula Sy=Bc×z1-Wb×z2, wherein z1 is the crisis scanning value coefficient, z2 is the normal scanning value coefficient, the value of z1 is 0.23, and the value of z2 is 0.22. The scanning adjustment high value is set to Cp, and the scanning adjustment low value is set to Ea. When the scanning adjustment value Sy≥scanning adjustment high value Cp, the fixed period of the vulnerability scanning module scanning the user's assets is shortened. When the scanning adjustment low value Ea≤scanning adjustment value Sy<scanning adjustment high value Cp, no processing is performed. When the scanning adjustment value Sy<scanning adjustment low value Ea, the fixed period of the vulnerability scanning module scanning the user's assets is extended. By setting up a scanning adjustment module, you can adjust the fixed period of scanning user asset vulnerabilities based on vulnerability scanning records. On the basis of ensuring closed-loop processing of user asset vulnerabilities, you can reasonably allocate the system's scanning frequency for different user assets.

[0035] Working principle:

[0036] A vulnerability closed-loop processing method based on vulnerability scanning includes the following steps:

[0037] Step 1: Scan the user's assets based on a fixed period, obtain the user's asset information, perform vulnerability scans on the user's asset information, and generate vulnerability scan records after each scan;

[0038] Step 2: Sort the vulnerability handling priorities of subsequent users based on the vulnerability scanning records;

[0039] Step 3: Adjust the fixed period of user asset vulnerabilities based on vulnerability scanning records.

[0040] The above is only a preferred embodiment of the present invention. The protection scope of the present invention is not limited to the above embodiments. All technical solutions under the concept of the present invention belong to the protection scope of the present invention. It should be pointed out that for ordinary technicians in this technical field, some improvements and modifications without departing from the principle of the present invention should also be regarded as the protection scope of this template.

[0041] The above is a detailed description of an embodiment of the present invention, but the content is only a preferred embodiment of the present invention and cannot be considered to limit the scope of implementation of the present invention. All equivalent changes and improvements made within the scope of the present invention should still fall within the scope of the patent coverage of the present invention.

Claims

1. A vulnerability closed-loop processing method based on vulnerability scanning, characterized in that: The steps include: Step 1: Scan the user's assets based on a fixed period, obtain the user's asset information, perform vulnerability scans on the user's asset information, and generate vulnerability scan records after each scan; Step 2: Sort the vulnerability handling priorities of subsequent users based on the vulnerability scanning records; Step 3: Adjust the fixed period of user asset vulnerabilities based on vulnerability scanning records.

2. A vulnerability closed-loop processing system based on vulnerability scanning, applied to a vulnerability closed-loop processing method based on vulnerability scanning according to claim 1, characterized in that: Includes vulnerability scanning module, closed-loop processing module, and scanning adjustment module; The vulnerability scanning module is used to scan the user's assets based on a fixed period, obtain the user's asset information, perform vulnerability scanning on the user's asset information, and generate a vulnerability scanning record after each scan; The closed-loop processing module is used to process the scanned vulnerability types in sequence, specifically: Obtain all vulnerability scan records of the user before the current time of the system, mark vulnerability scan records with the same vulnerability type as similar vulnerability records, sort all similar vulnerability records in the order of vulnerability scan time, calculate the time difference between the vulnerability scan times of two adjacent similar vulnerability records after sorting, obtain similar vulnerability intervals, set each similar vulnerability interval to correspond to a standard vulnerability interval, when the similar vulnerability interval is less than the standard vulnerability interval, mark the similar vulnerability interval as a high-frequency vulnerability interval, and obtain a high-frequency vulnerability value Fp, when the similar vulnerability interval is greater than or equal to the standard vulnerability interval, mark the similar vulnerability interval as a common-frequency vulnerability interval, and obtain a common-frequency vulnerability value Dq, obtain a closed-loop repair value Rw of this type of vulnerability, sort all vulnerability types from large to small according to the numerical value of the closed-loop repair value Rw, and after performing vulnerability scanning on user asset information in the next fixed period, process the scanned vulnerability types in the sorted order; The scanning adjustment module is used to adjust the fixed period of scanning user asset vulnerabilities, specifically: All vulnerability scanning records of the user before the current time of the system are obtained, and a threshold value for the number of vulnerability types is set. When the number of vulnerability types in the vulnerability scanning record is ≥ the threshold value for the number of vulnerability types, the vulnerability scanning record is marked as a crisis scanning record, and a crisis scanning value Bc is obtained. When the number of vulnerability types in the vulnerability scanning record is < the threshold value for the number of vulnerability types, the vulnerability scanning record is marked as a normal scanning record, and a normal scanning value Wb is obtained. A scanning adjustment value Sy is obtained, and a high scanning adjustment value is set to Cp, and a low scanning adjustment value is set to Ea. When the scanning adjustment value Sy is ≥ the high scanning adjustment value Cp, a fixed period for the vulnerability scanning module to scan the user's assets is shortened. When the low scanning adjustment value Ea is ≤ the scanning adjustment value Sy < the high scanning adjustment value Cp, no processing is performed. When the scanning adjustment value Sy < the low scanning adjustment value Ea, a fixed period for the vulnerability scanning module to scan the user's assets is extended.

3. According to claim 2, a vulnerability closed-loop processing system based on vulnerability scanning is characterized in that: Vulnerability scanning records include vulnerability type number and vulnerability scanning time.

4. According to claim 3, a vulnerability closed-loop processing system based on vulnerability scanning is characterized in that: The high-frequency vulnerability value Fp is obtained by the following steps: calculating the difference between the standard vulnerability interval and the high-frequency vulnerability interval to obtain the high-frequency interval difference, summing up all the high-frequency interval differences to obtain the total high-frequency interval difference, and marking it as Wk, obtaining the total number of times the same type of vulnerability interval is marked as a high-frequency vulnerability interval, and marking it as Hs, and using the formula Fp=Wk×a1+Hs×a2 to obtain the high-frequency vulnerability value Fp, where a1 is the high-frequency interval total difference coefficient, and a2 is the high-frequency vulnerability number coefficient.

5. According to claim 4, a vulnerability closed-loop processing system based on vulnerability scanning is characterized in that: The common frequency vulnerability value Dq is obtained by the following steps: calculating the difference between the common frequency vulnerability interval and the standard vulnerability interval to obtain the common frequency interval difference; summing up all the common frequency interval differences to obtain the total common frequency interval difference and marking it as Ty; obtaining the total number of times the same type of vulnerability interval is marked as the common frequency vulnerability interval and marking it as Sn; and obtaining the common frequency vulnerability value Dq using the formula Dq=Ty×b1+Sn×b2, where b1 is the common frequency interval total difference coefficient and b2 is the common frequency vulnerability number coefficient.

6. A vulnerability closed-loop processing system based on vulnerability scanning according to claim 5, characterized in that: The closed-loop repair value Rw is obtained by the following steps: obtain the total number of vulnerability scan records of the user before the current system time, and mark it as Lb; obtain the total number of vulnerability records of the same vulnerability type of the user before the current system time, and mark it as Mz; use the formula The closed-loop repair value Rw of this type of vulnerability is obtained, where c1 is the vulnerability scan quantity coefficient, c2 is the same type of vulnerability quantity coefficient, c3 is the high-frequency vulnerability value coefficient, and c4 is the general frequency vulnerability value coefficient.

7. A vulnerability closed-loop processing system based on vulnerability scanning according to claim 6, characterized in that: The crisis scan value Bc is obtained by the following steps: the difference between the number of vulnerability types recorded in the crisis scan and the threshold of the number of vulnerability types is calculated to obtain the crisis vulnerability difference, all the crisis vulnerability differences are summed and averaged to obtain the crisis vulnerability average difference, which is marked as Gz, all the crisis scan records are sorted in the order of the vulnerability scan time, the time difference between the two adjacent vulnerability scan times after sorting is calculated to obtain the crisis scan interval, all the crisis scan intervals are summed and averaged to obtain the crisis scan average interval, which is marked as Ue, and the formula is used. The crisis scanning value Bc is obtained, where d1 is the crisis vulnerability mean difference coefficient and d2 is the crisis scanning mean interval coefficient.

8. The vulnerability closed-loop processing system based on vulnerability scanning according to claim 7 is characterized in that: The normal scan value Wb is obtained by the following steps: the difference between the vulnerability type number threshold and the vulnerability type number of the normal scan record is calculated to obtain the normal vulnerability difference, all the normal vulnerability differences are summed and averaged to obtain the normal vulnerability average difference, which is marked as Fe, all the normal scan records are sorted in the chronological order of the vulnerability scan time, the time difference between the two adjacent vulnerability scan times after sorting is calculated to obtain the normal scan interval, all the normal scan intervals are summed and averaged to obtain the normal scan average interval, which is marked as Jt, and the formula is used. The normal scanning value Wb is obtained, where e1 is the normal vulnerability average difference coefficient and e2 is the normal scanning average interval coefficient.

9. A vulnerability closed-loop processing system based on vulnerability scanning according to claim 8, characterized in that: The scanning adjustment value Sy is obtained by the following steps: the scanning adjustment value Sy is obtained by using the formula Sy=Bc×z1-Wb×z2, wherein z1 is the crisis scanning value coefficient, and z2 is the normal scanning value coefficient.

Images