Vulnerability repair management method and device, equipment, medium and product

Abstract

The invention relates to the technical field of computers, and discloses a vulnerability repair management method and device, equipment, a medium and a product. The method comprises the following steps: acquiring vulnerability repair information; according to report configuration operation of the user, report basic configuration and report content configuration are obtained, report generation is carried out according to the report basic configuration, the report content configuration and the vulnerability repair information, and a vulnerability repair statistical report is obtained; and according to the basic configuration of the report, sending the bug repair statistical report to a specified receiving mailbox in a mail mode. According to the scheme of the embodiment, the bug repair information is analyzed and processed based on the report basic configuration and the report content configuration to generate the bug repair statistical report, and the bug repair statistical report is directly sent to the specified receiving mailbox in a mail mode, so that automatic combination of bug repair management and report generation can be realized, and the bug repair management efficiency is improved. And a loophole full-life-cycle management closed loop can be realized.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a vulnerability repair management method, device, equipment, medium and product. Background Art

[0002] In the process of security operations, vulnerability management throughout its life cycle is a very important part of the work. In the process of vulnerability management, it involves the understanding of the intranet vulnerability situation, and at the same time, management also requires further understanding of the vulnerability repair situation.

[0003] At present, the existing vulnerability repair management methods usually conduct vulnerability repair statistics and analysis based on the manufacturer or vulnerability type dimension. They fail to combine vulnerability management, vulnerability repair and reporting well, and fail to form a relatively complete vulnerability life cycle management closed loop. Summary of the invention

[0004] The present invention provides a vulnerability repair management method, device, equipment, medium and product, which can realize the automatic combination of vulnerability repair management and report generation, and realize a closed loop of vulnerability full life cycle management.

[0005] According to one aspect of the present invention, a vulnerability repair management method is provided, comprising:

[0006] Get vulnerability fix information;

[0007] According to the report configuration operation of the user, the basic report configuration and the report content configuration are obtained, and the report is generated according to the basic report configuration, the report content configuration and the vulnerability repair information to obtain the vulnerability repair statistical report;

[0008] According to the basic configuration of the report, the vulnerability repair statistics report is sent to a designated receiving mailbox by email.

[0009] According to another aspect of the present invention, there is provided a vulnerability repair management device, comprising:

[0010] A vulnerability repair information acquisition module is used to obtain vulnerability repair information;

[0011] A report generation module is used to obtain a basic report configuration and a report content configuration according to a report configuration operation of a user, and to generate a report according to the basic report configuration, the report content configuration and the vulnerability repair information to obtain a vulnerability repair statistical report;

[0012] The report sending module is used to send the vulnerability repair statistics report to a designated receiving mailbox by email according to the basic configuration of the report.

[0013] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0014] at least one processor; and

[0015] a memory communicatively connected to the at least one processor; wherein,

[0016] The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the vulnerability repair management method described in any embodiment of the present invention.

[0017] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores a computer program, and the computer program is used to enable a processor to implement the vulnerability repair management method described in any embodiment of the present invention when executed.

[0018] According to another aspect of the present invention, a computer program product is provided, including a computer program, wherein when the computer program is executed by a processor, the computer program implements the vulnerability repair management method described in any embodiment of the present invention.

[0019] The technical solution of the embodiment of the present invention obtains vulnerability repair information; obtains basic report configuration and report content configuration according to the user's report configuration operation, and generates a report according to the basic report configuration, the report content configuration and the vulnerability repair information to obtain a vulnerability repair statistical report; according to the basic report configuration, the vulnerability repair statistical report is sent to a designated receiving mailbox by email; by analyzing and processing the vulnerability repair information based on the basic report configuration and the report content configuration to generate a vulnerability repair statistical report, and directly sending the vulnerability repair statistical report to the designated receiving mailbox by email, it can realize the automatic combination of vulnerability repair management and report generation, and can realize a closed loop of vulnerability life cycle management.

[0020] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0022] Figure 1is a flow chart of a vulnerability repair management method provided according to the first embodiment of the present invention;

[0023] Figure 2 is a schematic diagram of a basic report configuration page provided according to Embodiment 1 of the present invention;

[0024] Figure 3 is a schematic diagram of a report content configuration page provided according to Embodiment 1 of the present invention;

[0025] Figure 4 This is a schematic diagram of a final mail effect provided according to the first embodiment of the present invention;

[0026] Figure 5 This is a schematic diagram of the structure of a vulnerability repair management device provided according to Embodiment 2 of the present invention;

[0027] Figure 6 It is a structural schematic diagram of an electronic device that implements the vulnerability repair management method of an embodiment of the present invention. DETAILED DESCRIPTION

[0028] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0029] It should be noted that the terms "first", "second", "target", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0030] Embodiment 1

[0031] Figure 1A flowchart of a vulnerability repair management method is provided for the first embodiment of the present invention. This embodiment is applicable to the situation where the vulnerability repair status of enterprise departments is automatically counted and displayed in the form of reports. The method can be executed by a vulnerability repair management device, which can be implemented in the form of hardware and / or software. Typically, the vulnerability repair management device can be configured in an electronic device, such as a computer device or a server. Figure 1 As shown, the method includes:

[0032] S110. Obtain vulnerability repair information.

[0033] Among them, the vulnerability repair information can be relevant information about the repair of intranet vulnerabilities by various departments during the vulnerability management process, for example, it can include vulnerability identification, vulnerability host identification, vulnerability status, department name, etc.

[0034] In this embodiment, after discovering and repairing network security vulnerabilities, the corresponding vulnerability repair information can be stored in a database, and when statistics and analysis of vulnerability repair situations are required, the relevant vulnerability repair information can be read from the database. Among them, the vulnerability repair information corresponding to each security vulnerability can be used as a piece of data.

[0035] Optionally, obtain vulnerability repair information, which may include:

[0036] Acquire vulnerability attribute information, wherein the vulnerability attribute information includes vulnerability identification, vulnerability host identification, vulnerability level and vulnerability status;

[0037] According to the mapping relationship between the preset host identifier and the department name, the target department name corresponding to the vulnerability attribute information is obtained, and according to the vulnerability attribute information and the corresponding target department name, the vulnerability repair information is obtained.

[0038] The vulnerability repair information may consist of vulnerability attribute information and department name. In this embodiment, a python command may be used to perform an interface query operation to obtain vulnerability attribute information from a database, and the vulnerability attribute information may be identified when vulnerability discovery is performed.

[0039] Specifically, the vulnerability host identifier can be matched one by one with each host identifier in the mapping relationship between the preset host identifier and the department name to find a mapping relationship that matches the vulnerability attribute information, and the department name in the mapping relationship is used as the target department name. This embodiment does not specifically limit the matching detection method. Furthermore, the vulnerability attribute information and the corresponding target department name can be spliced ​​to form a vulnerability repair information. Typically, a secondary query can be performed through a python instruction to obtain the mapping relationship between the preset host identifier and the department name.

[0040] In this embodiment, based on the acquisition of vulnerability data and its storage in the database, different data fields can be collected from different databases according to statistical needs using Python scripts, and these field names and field values ​​are matched through a unified host identifier. After matching, they are spliced ​​into a whole wide table for storing all subsequent information that needs to be counted and presented.

[0041] S120. According to the report configuration operation of the user, a basic report configuration and a report content configuration are obtained, and a report is generated according to the basic report configuration, the report content configuration and the vulnerability repair information to obtain a vulnerability repair statistical report.

[0042] In this embodiment, the user can perform report configuration operations on the report function page. The report configuration may include basic report configuration and report content configuration. For example, the basic report configuration page may be as follows: Figure 2 As shown, the report content configuration page can be Figure 3 As shown, users can edit and save the basic report configuration and report content configuration on the basic report configuration page and report content configuration page respectively.

[0043] Among them, the basic configuration of the report may include the report name, running user, report type, receiving mailbox, email subject and / or execution plan, and the basic configuration of the report may also include fields such as description, resource tag, resource authorization, CC mailbox, whether to display in the email body, BCC mailbox, etc. The user can edit the basic configuration of the report by filling in or selecting. The report content configuration can be a search processing language (SPL) statement for calculating vulnerability repair indicators based on vulnerability repair information. In this embodiment, multiple SPL statements can be set to be responsible for different information processing functions.

[0044] Specifically, the vulnerability repair information can be analyzed and processed based on the report content configuration to calculate the index value of each vulnerability repair indicator (for example, the number of vulnerabilities repaired, the vulnerability repair rate, etc.) corresponding to each department name; then, according to the basic report configuration (such as report template, etc.), the current vulnerability repair statistical report can be generated according to the index value of each vulnerability repair indicator corresponding to each department and the vulnerability repair information.

[0045] Optionally, generating a report according to the basic report configuration, the report content configuration and the vulnerability repair information to obtain a vulnerability repair statistical report may include:

[0046] According to the report content configuration, a search processing language statement is obtained, and according to the execution plan, the vulnerability repair information is analyzed and processed by the search processing language statement to obtain vulnerability repair indicator data;

[0047] Generate a vulnerability repair statistics report based on the report name, the report type and the vulnerability repair indicator data.

[0048] In this embodiment, the report content configuration can be parsed to obtain an SPL statement. For example, the SPL statement can be starttime="now / d"endtime=""appname:loop lrename loop.*as*where|empty(orgname)stats distinct(loop_id)as all loop_cnt by orgname|jointype=leftorgname[[starttime="now'd"endtime."”appname:loop lrenameloop.*as*|wherelempty(orgname)hwhere status=="1"|stats distinct(loop_id)as fixed_cnt byorgname]]|fillnull value="0"fixed_cnt|join type=left orgname[[starttime-"now / d"endtime_"”appname:loop rename loop.*as*where! empty(orgname)|statsdistinct(loop_id)as cnt by orgname,risk_level|evalrisk_level=case(risk_level=="2","high risk",risk_level=="1","medium risk",default,"low risk")|eval detail=risk_level+":"+cnt+"piece"|table orgname,detail|mvcom binesep=","detail]]|evalfixed_cnt=tolong(fixed_cnt)|eval fixed_per=fixed cnt / all_loop_cnt*100|sortby fixed_per|eval fixed_per=format("%.2f",fixed_per)+"%"|eval detail="Total"+all_loop_cnt+" vulnerabilities, where"+detail|table orgname,fixed_cnt,fixed_per,all_loop_cnt,detail|sort by all_loop_cnt|rename orgname as"department name",fixed_peras"department vulnerability repair rate",fixed_cnt as"department vulnerability repair number",all_loop_cnt as"department vulnerability total number",detail as"vulnerability details". SPL statements can include statistical dimensions, vulnerability repair indicators to be calculated, calculation formulas for vulnerability repair indicators, data sources for vulnerability repair indicator calculations, etc.

[0049] Specifically, according to the execution plan in the basic configuration of the report, the SPL statement can be automatically run regularly to read the vulnerability repair information and calculate the relevant vulnerability repair indicators to obtain the vulnerability repair indicator data; then, the vulnerability repair indicator data and the vulnerability repair information can be filled into the corresponding positions of the report template, and after the filling is completed, the vulnerability repair statistical report can be finally generated according to the report name and report type.

[0050] Among them, the vulnerability repair indicator data may include the number of department vulnerabilities repaired, the department vulnerability repair rate, the total number of department vulnerabilities and / or vulnerability details. The vulnerability repair indicator data corresponds to the department name one by one. It is understandable that the number and type of vulnerability repair indicators can be adaptively adjusted according to the task scenario. In a specific example, the SPL statement can be used to calculate the indicator value of each vulnerability repair indicator corresponding to each department name in units of departments, thereby obtaining the vulnerability repair indicator data corresponding to each department name. Then, each department name and the corresponding vulnerability repair indicator data can be taken as a row to generate a vulnerability repair statistical report.

[0051] The advantage of the above settings is that it can realize the customized generation of vulnerability repair statistical reports, which can improve the flexibility of vulnerability repair management and meet the reporting requirements of different task scenarios.

[0052] Optionally, according to the execution plan, analyzing and processing the vulnerability repair information through the search processing language statement to obtain vulnerability repair index data may include: sorting the vulnerability repair index data according to the target vulnerability repair index through the search processing language statement to obtain the sorted vulnerability repair index data. Correspondingly, a vulnerability repair statistical report may be generated according to the report name, report type and the sorted vulnerability repair index data.

[0053] In a specific example, based on the department vulnerability repair rate, the vulnerability repair indicator data corresponding to each department name can be sorted in order from high to low. Among them, the number of department vulnerabilities repaired can be divided by the total number of department vulnerabilities (high risk + medium risk), and the quotient can be used as the vulnerability repair rate of each department. The number of department vulnerabilities repaired and the total number of department vulnerabilities can be obtained by counting all vulnerability repair information corresponding to each department name.

[0054] S130. According to the basic configuration of the report, the vulnerability repair statistics report is sent to a designated receiving mailbox by email.

[0055] Specifically, after generating a vulnerability repair statistics report, you can determine the email subject, receiving mailbox, CC mailbox, BCC mailbox and other information according to the basic configuration of the report, and send the vulnerability repair statistics report to the designated receiving mailbox by email based on the determined information. For example, the final email effect can be as follows: Figure 4 As shown, the vulnerability repair statistics report can be displayed directly in the email body as an embedded table or as an email attachment. Through this email, corporate leaders can clearly understand the vulnerability repair status of each department this month, and can also download the vulnerability repair statistics report in PDF format.

[0056] The technical solution of the embodiment of the present invention obtains vulnerability repair information; obtains basic report configuration and report content configuration according to the user's report configuration operation, and generates a report according to the basic report configuration, the report content configuration and the vulnerability repair information to obtain a vulnerability repair statistical report; according to the basic report configuration, the vulnerability repair statistical report is sent to a designated receiving mailbox by email; by analyzing and processing the vulnerability repair information based on the basic report configuration and the report content configuration to generate a vulnerability repair statistical report, and directly sending the vulnerability repair statistical report to the designated receiving mailbox by email, it can realize the automatic combination of vulnerability repair management and report generation, and can realize a closed loop of vulnerability life cycle management.

[0057] In an optional implementation of this embodiment, after obtaining the vulnerability repair information, the following may also be included:

[0058] A comma-separated value file is generated according to the vulnerability repair information, and the comma-separated value file is saved to a specified path.

[0059] In a specific example, after finding the vulnerability repair information, a comma-separated values ​​(CSV) file containing vulnerability identification, vulnerability level, vulnerability status, vulnerability host identification, and department name can be generated based on the vulnerability repair information, and the CSV can be stored in a specified path.

[0060] Correspondingly, generating a report according to the basic report configuration, the report content configuration and the vulnerability repair information to obtain a vulnerability repair statistical report may include:

[0061] The comma-separated value file is read from the specified path, and a report is generated according to the basic report configuration, the report content configuration and the comma-separated value file to obtain a vulnerability repair statistics report.

[0062] Specifically, when generating a report, first, according to the basic configuration of the report, you can read the CSV file from the specified path through the SPL statement in the report content configuration to obtain vulnerability repair information, and calculate the vulnerability repair index for the obtained vulnerability repair information to obtain the vulnerability repair index data corresponding to each department name; then, according to the basic configuration of the report, you can generate a report based on the department name and the corresponding vulnerability repair index data to obtain a vulnerability repair statistical report.

[0063] The advantage of the above settings is that it can improve the efficiency of searching for vulnerability repair information and the efficiency of generating vulnerability repair statistical reports.

[0064] The scheme of this embodiment counts and ranks the vulnerabilities in the business system in an automated way, reduces the workload of manual screening, and improves the efficiency of vulnerability management; by displaying the internal vulnerability ranking and repair rate of the enterprise in a visual way, the management and technical personnel can clearly understand the current security situation and room for improvement; compared with the previous manual statistical calculation method, the automated vulnerability identification and email sending mechanism reduces the possibility of human operation errors and ensures the accuracy and reliability of vulnerability management. Moreover, in the past, the management of vulnerabilities was often concerned by the security department itself, but the repair of vulnerabilities needs to rely on the person in charge of each different asset / system. The security department will encounter a lot of resistance in promoting this work. The vulnerability report sending mechanism helps to improve the company's internal attention to network security, and more intuitively displays the vulnerability repair situation of each department. From the leadership level, important information can be obtained faster, so as to enhance the safety awareness of all employees from the management perspective. Secondly, the content and format of the vulnerability report can be customized according to the needs of different enterprises to meet the reporting needs in different scenarios.

[0065] Embodiment 2

[0066] Figure 5 This is a schematic diagram of the structure of a vulnerability repair management device provided by the second embodiment of the present invention. Figure 5 As shown, the device includes: a vulnerability repair information acquisition module 210, a report generation module 220 and a report sending module 230; wherein,

[0067] A vulnerability repair information acquisition module 210 is used to obtain vulnerability repair information;

[0068] The report generation module 220 is used to obtain the basic report configuration and the report content configuration according to the report configuration operation of the user, and generate a report according to the basic report configuration, the report content configuration and the vulnerability repair information to obtain a vulnerability repair statistical report;

[0069] The report sending module 230 is used to send the vulnerability repair statistics report to a designated receiving mailbox by email according to the basic configuration of the report.

[0070] The technical solution of the embodiment of the present invention obtains vulnerability repair information; obtains basic report configuration and report content configuration according to the user's report configuration operation, and generates a report according to the basic report configuration, the report content configuration and the vulnerability repair information to obtain a vulnerability repair statistical report; according to the basic report configuration, the vulnerability repair statistical report is sent to a designated receiving mailbox by email; by analyzing and processing the vulnerability repair information based on the basic report configuration and the report content configuration to generate a vulnerability repair statistical report, and directly sending the vulnerability repair statistical report to the designated receiving mailbox by email, it can realize the automatic combination of vulnerability repair management and report generation, and can realize a closed loop of vulnerability life cycle management.

[0071] Optionally, the vulnerability repair information acquisition module 210 is specifically used to obtain vulnerability attribute information, wherein the vulnerability attribute information includes a vulnerability identifier, a vulnerability host identifier, a vulnerability level, and a vulnerability status;

[0072] According to the mapping relationship between the preset host identifier and the department name, the target department name corresponding to the vulnerability attribute information is obtained, and according to the vulnerability attribute information and the corresponding target department name, the vulnerability repair information is obtained.

[0073] Optional, vulnerability repair management device, also includes:

[0074] A file saving module, used to generate a comma separated value file according to the vulnerability repair information, and save the comma separated value file to a specified path;

[0075] The report generation module 220 is specifically used to read the comma separated value file from the specified path, and generate a report according to the report basic configuration, the report content configuration and the comma separated value file to obtain a vulnerability repair statistical report.

[0076] Optionally, basic report configuration includes report name, running user, report type, receiving mailbox, email subject and / or execution plan.

[0077] Optionally, the report generation module 220 is specifically configured to obtain a search processing language statement according to the report content configuration, and analyze and process the vulnerability repair information through the search processing language statement according to the execution plan to obtain vulnerability repair indicator data;

[0078] Generate a vulnerability repair statistics report based on the report name, the report type and the vulnerability repair indicator data.

[0079] Optionally, the vulnerability repair indicator data includes the number of department vulnerabilities repaired, the department vulnerability repair rate, the total number of department vulnerabilities and / or vulnerability details.

[0080] The vulnerability repair management device provided in the embodiment of the present invention can execute the vulnerability repair management method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0081] In the technical solution of the present disclosure, the collection, storage, use, processing, transmission, provision and disclosure of user personal information involved are in compliance with the provisions of relevant laws and regulations and do not violate public order and good morals.

[0082] Embodiment 3

[0083] Figure 6 A schematic diagram of the structure of an electronic device 30 that can be used to implement an embodiment of the present invention is shown. The electronic device 30 is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device 30 can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0084] like Figure 6As shown, the electronic device 30 includes at least one processor 31, and a memory connected to the at least one processor 31, such as a read-only memory (ROM) 32, a random access memory (RAM) 33, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 31 can perform various appropriate actions and processes according to the computer program stored in the read-only memory 32 or the computer program loaded from the storage unit 38 to the random access memory 33. In the RAM 33, various programs and data required for the operation of the electronic device 30 can also be stored. The processor 31, the ROM 32 and the RAM 33 are connected to each other through a bus 34. The input / output (I / O) interface 35 is also connected to the bus 34.

[0085] A number of components in the electronic device 30 are connected to the I / O interface 35, including: an input unit 36, such as a keyboard, a mouse, etc.; an output unit 37, such as various types of displays, speakers, etc.; a storage unit 38, such as a disk, an optical disk, etc.; and a communication unit 39, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 39 allows the electronic device 30 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0086] The processor 31 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 31 include, but are not limited to, a central processing unit, a graphics processing unit, various special artificial intelligence computing chips, various processors running machine learning model algorithms, digital signal processors, and any appropriate processors, controllers, microcontrollers, etc. The processor 31 executes the various methods and processes described above, such as a management method for vulnerability repair.

[0087] In some embodiments, the vulnerability repair management method can be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 38. In some embodiments, part or all of the computer program can be loaded and / or installed on the electronic device 30 via the ROM 32 and / or the communication unit 39. When the computer program is loaded into the RAM 33 and executed by the processor 31, one or more steps of the vulnerability repair management method described above can be performed. Alternatively, in other embodiments, the processor 31 can be configured to execute the vulnerability repair management method in any other appropriate manner (for example, by means of firmware).

[0088] Various embodiments of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays, application specific integrated circuits, application specific standard products, systems on a chip, load programmable logic devices, computer hardware, firmware, software, and / or combinations thereof. These various embodiments may include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0089] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0090] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, device, or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices, or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory, a read-only memory, an erasable programmable read-only memory, an optical fiber, a portable compact disk read-only memory, an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0091] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device 30 having: a display device (e.g., a cathode ray tube or a liquid crystal display) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or a trackball) through which the user can provide input to the electronic device 30. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0092] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: local area networks, wide area networks, blockchain networks, and the Internet.

[0093] A computing system may include clients and servers. Clients and servers are generally remote from each other and typically interact through a communication network. The relationship of client and server is generated by computer programs running on respective computers and having a client-server relationship to each other. The server may be a cloud server.

[0094] This embodiment may also include a computer program product, which includes a computer program. When the computer program is executed by a processor, it implements the vulnerability repair management method provided by any embodiment of the present invention.

[0095] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0096] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A vulnerability repair management method, characterized in that: include: Get vulnerability fix information; According to the report configuration operation of the user, the basic report configuration and the report content configuration are obtained, and the report is generated according to the basic report configuration, the report content configuration and the vulnerability repair information to obtain the vulnerability repair statistical report; According to the basic configuration of the report, the vulnerability repair statistics report is sent to a designated receiving mailbox by email.

2. The method according to claim 1, characterized in that Get vulnerability fix information, including: Acquire vulnerability attribute information, wherein the vulnerability attribute information includes vulnerability identification, vulnerability host identification, vulnerability level and vulnerability status; According to the mapping relationship between the preset host identifier and the department name, the target department name corresponding to the vulnerability attribute information is obtained, and according to the vulnerability attribute information and the corresponding target department name, the vulnerability repair information is obtained.

3. The method according to claim 1, characterized in that After obtaining the vulnerability fix information, it also includes: Generate a comma-separated value file according to the vulnerability repair information, and save the comma-separated value file to a specified path; Generate a report according to the report basic configuration, the report content configuration and the vulnerability repair information to obtain a vulnerability repair statistical report, including: The comma-separated value file is read from the specified path, and a report is generated according to the basic report configuration, the report content configuration and the comma-separated value file to obtain a vulnerability repair statistics report.

4. The method according to claim 1, characterized in that: The basic configuration of a report includes the report name, running user, report type, receiving email address, email subject and / or execution plan.

5. The method according to claim 4, characterized in that Generate a report according to the report basic configuration, the report content configuration and the vulnerability repair information to obtain a vulnerability repair statistical report, including: According to the report content configuration, a search processing language statement is obtained, and according to the execution plan, the vulnerability repair information is analyzed and processed by the search processing language statement to obtain vulnerability repair indicator data; Generate a vulnerability repair statistics report based on the report name, the report type and the vulnerability repair indicator data.

6. The method according to claim 5, characterized in that Vulnerability repair indicator data includes the number of departmental vulnerabilities repaired, departmental vulnerability repair rate, total number of departmental vulnerabilities and / or vulnerability details.

7. A vulnerability repair management device, characterized in that: include: A vulnerability repair information acquisition module is used to obtain vulnerability repair information; A report generation module is used to obtain a basic report configuration and a report content configuration according to a report configuration operation of a user, and to generate a report according to the basic report configuration, the report content configuration and the vulnerability repair information to obtain a vulnerability repair statistical report; The report sending module is used to send the vulnerability repair statistics report to a designated receiving mailbox by email according to the basic configuration of the report.

8. An electronic device, characterized in that: The electronic device comprises: at least one processor, and a memory communicatively connected to the at least one processor; wherein, The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the vulnerability repair management method according to any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and the computer program is used to enable a processor to implement the vulnerability repair management method according to any one of claims 1 to 6 when executed.

10. A computer program product, characterized in that The invention comprises a computer program, which, when executed by a processor, implements the vulnerability repair management method according to any one of claims 1 to 6.

Images