Host security risk vulnerability visual management system

Abstract

The invention discloses a host security risk vulnerability visual management system, which relates to the technical field of network host security, and adopts the technical scheme that the host security risk vulnerability visual management system comprises a host security vulnerability management system, and the output end of the host security vulnerability management system is connected with a host security vulnerability detection system; the output end of the host security vulnerability detection system is connected with a host security vulnerability risk monitoring and analysis system, the output end of the host security vulnerability risk monitoring and analysis system is connected with a host dangerous vulnerability alarm system, and the output end of the host dangerous vulnerability alarm system is connected with a security vulnerability intrusion protection system. The output end of the security vulnerability intrusion protection system is connected with a security vulnerability patch repair system, and the output end of the security vulnerability patch repair system is connected with a security vulnerability disposal system. And after retest is completed, the host can be retested, so that vulnerability residues are prevented.

Description

Technical Field

[0001] The present invention relates to the technical field of network host security, and in particular to a host security risk vulnerability visualization management system. Background Art

[0002] Network security includes network equipment security, network information security, and network software security. It means that the hardware and software of the network system and the data in the system are protected and will not be destroyed, changed, or leaked due to accidental or malicious reasons. The system can run continuously and reliably and the network service is not interrupted. It has the characteristics of confidentiality, integrity, availability, controllability, and auditability.

[0003] In the visual management process of existing host security risk vulnerabilities, generally only the work of antivirus and patching is carried out, but the function of re-checking the vulnerability virus and strengthening the protection is not provided. Therefore, when encountering the same kind of vulnerability and virus again, the antivirus and patching work cannot be carried out in a targeted manner. At the same time, the existing warning devices generally adopt sirens, but the sirens sound is sharp, which will cause discomfort to the users and result in excessive warning effect. Summary of the invention

[0004] To this end, the present invention provides a host security risk vulnerability visualization management system, which monitors and repairs the vulnerabilities encountered by the host through the host security vulnerability management system, and at the same time sets a special warning device to alarm the vulnerability dangers encountered by the host, so as to solve the problem that the existing host security risk vulnerability visualization management process does not have the function of re-checking the vulnerability virus and strengthening the protection, and the existing warning devices generally use sirens, but the sirens sound is sharp and will cause discomfort to the user.

[0005] In order to achieve the above object, the present invention provides the following technical solutions: a host security risk vulnerability visualization management system, comprising

[0006] A host security vulnerability management system, wherein the output end of the host security vulnerability management system is connected to a host security vulnerability detection system, the output end of the host security vulnerability detection system is connected to a host security vulnerability risk monitoring and analysis system, and the output end of the host security vulnerability risk monitoring and analysis system is connected to a host dangerous vulnerability alarm system;

[0007] The output end of the host dangerous vulnerability alarm system is connected to a security vulnerability intrusion protection system, the output end of the security vulnerability intrusion protection system is connected to a security vulnerability patch repair system, and the output end of the security vulnerability patch repair system is connected to a security vulnerability disposal system.

[0008] Preferably, the host security vulnerability detection system includes a host system security vulnerability detection system and a host application security vulnerability detection system, and the host security vulnerability detection system also includes an EXP vulnerability detection system and a POC vulnerability detection system.

[0009] Preferably, the host security vulnerability risk monitoring and analysis system includes a host security information automatic identification system and a vulnerability risk level analysis system, and the host security vulnerability risk monitoring and analysis system also includes a high-risk level vulnerability monitoring system and a security risk level improvement system.

[0010] Preferably, the host dangerous vulnerability alarm system includes an abnormal account login alarm system and a brute force login alarm system, the host dangerous vulnerability alarm system also includes a backdoor implantation vulnerability alarm system and a local privilege escalation alarm system, and the output end of the host dangerous vulnerability alarm system is connected to an audio-visual alarm module.

[0011] Preferably, the security vulnerability patch repair system includes a vulnerability attack chain line drawing analysis module and a vulnerability positioning module, and the security vulnerability patch repair system also includes a vulnerability reproduction module, a security patch matching module and a vulnerability complete repair module.

[0012] Preferably, the security vulnerability handling system includes a security vulnerability special verification module, a vulnerability special retest module and a cloud platform vulnerability notification module.

[0013] Preferably, the audio-visual alarm module includes

[0014] A base, wherein the base is a circular structure, a support frame is fixedly connected to the top of the base, and a plurality of lifting slots are provided on the outer side of the support frame;

[0015] An alarm mechanism, which is arranged outside the support frame and is used to provide visual and audio alarms to the user;

[0016] The transmission mechanism is arranged inside the support frame, and the transmission mechanism is used to start the alarm mechanism.

[0017] Preferably, the transmission mechanism includes a transmission motor, which is fixedly arranged at the bottom of the base, and the output end of the transmission motor is fixedly connected to a transmission shaft, and the top end of the transmission shaft passes through the outside of the top of the support frame, and a reciprocating screw is embedded in the support frame, and a sleeve is sleeved on the outside of the reciprocating screw, and the reciprocating screw and the sleeve are connected by a ball screw pair, and the sleeve is set to a square structure, and the outside of the sleeve fits with the inner wall of the support frame, and striking blocks are fixedly connected to both sides of the sleeve, and the two striking blocks respectively pass through the two lifting slots and extend to the outside of the support frame.

[0018] Preferably, the alarm mechanism comprises a plurality of bells, the plurality of bells are arranged on both sides of the support frame, the front and rear sides of the plurality of bells are fixedly connected with round rods, the inner sides of the plurality of bells are provided with baffles, the outer sides of the plurality of baffles are fixedly connected with two cross plates, the two cross plates are respectively fixedly connected to the outer ends of the two round rods, the front and rear sides of the plurality of baffles are fixedly connected with connecting plates, the inner sides of the plurality of connecting plates are fixedly connected with telescopic rods, the plurality of telescopic rods are respectively fixedly connected to both sides of the support frame, and the outer sides of the plurality of telescopic rods are sleeved with springs;

[0019] A movable frame is provided on the top of the support frame, and the movable frame is fixedly sleeved on the outer side of the transmission shaft. A plurality of warning lights are fixedly connected to the outer side of the movable frame.

[0020] Preferably, the method further comprises the following steps:

[0021] S1: The host security vulnerability management system controls the host security vulnerability detection system to detect and process the security vulnerabilities inside the host. After the vulnerabilities are detected, the host security vulnerability risk monitoring and analysis system monitors and analyzes the risks of the detected security vulnerabilities. After the analysis is completed, the host dangerous vulnerability alarm system alarms the dangerous vulnerabilities. After the alarm, the security vulnerability intrusion protection system protects the security vulnerabilities to prevent the spread of the vulnerabilities. Then, the security vulnerability patch repair system patches the security vulnerabilities. Finally, the security vulnerability disposal system handles the existing security vulnerabilities to facilitate the next patch repair work.

[0022] S2: The host security vulnerability detection system controls the host system security vulnerability detection system to detect security vulnerabilities in the system inside the host, and then uses the host application security vulnerability detection system to detect security vulnerabilities in the application inside the host, and then uses the EXP vulnerability detection system to detect EXP vulnerabilities on the host, and finally uses the POC vulnerability detection system to detect POC vulnerabilities on the host. After the detection is completed, the host security vulnerability risk monitoring and analysis system controls the host security information automatic identification system to automatically identify the security information of the host, and then uses the vulnerability risk level analysis system to analyze the risk level of the vulnerability that has occurred. After the analysis is completed, the high-risk vulnerability monitoring system is controlled to monitor the analyzed high-risk vulnerabilities, and finally the security risk level improvement system is used to improve the corresponding vulnerability level judgment of the host;

[0023] S3: The host dangerous vulnerability alarm system controls the account abnormal login alarm system to alarm the user when the host account logs in at an abnormal address, and then controls the brute force login alarm system to alarm when brute force login occurs. Then the backdoor implant vulnerability alarm system alarms the backdoor implant vulnerability, and finally the main body privilege escalation alarm system alarms the privilege escalation operation. After the alarm, the security vulnerability patch repair system controls the vulnerability attack chain line drawing analysis module to draw a line analysis on the vulnerability attack route. After the analysis is completed, the security vulnerability is located through the vulnerability location module, and then the located vulnerability is reproduced through the vulnerability reproduction module. After the reproduction is completed, the vulnerability is patched through the security patch matching module. After the matching is completed, the vulnerability is completely repaired through the vulnerability complete repair module.

[0024] S4: The security vulnerability handling system performs special verification on the repaired security vulnerabilities through the security vulnerability special verification module, and then retests the special vulnerabilities through the control vulnerability special retest module to prevent residual vulnerabilities. Finally, the cloud platform vulnerability notification module notifies the cloud platform of the repaired vulnerabilities, so as to pay attention to and store the vulnerabilities to prevent the next similar vulnerability attack.

[0025] The beneficial effects of the present invention are:

[0026] The host security vulnerability management system is used to monitor and repair the vulnerabilities encountered by the host. At the same time, a special warning device is set to alarm the vulnerability dangers encountered by the host, so as to solve the problem that the existing host security risk vulnerabilities do not have the function of re-checking the vulnerability viruses and strengthening the protection in the visual management process, and the existing warning devices generally use sirens, but the sirens sound is sharp and may cause discomfort to the users. The present invention sets a special vulnerability re-test module to perform special re-test on the resolved vulnerabilities. After the re-test is completed, the host can be re-tested to prevent the residual vulnerabilities, which greatly ensures the efficiency of the host security vulnerability management. At the same time, the device uses an audio-visual alarm module to alarm the vulnerability situation, which can provide real-time alarm processing for the staff. At the same time, the device uses a bell and a warning light to prevent the sirens from causing discomfort to the users, which plays a good warning role. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] In order to more clearly illustrate the implementation methods of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for the implementation methods or the description of the prior art. Obviously, the drawings described below are only exemplary, and for ordinary technicians in this field, other implementation drawings can be derived from the provided drawings without creative work.

[0028] The structures, proportions, sizes, etc. illustrated in this specification are only used to match the contents disclosed in the specification so as to facilitate understanding and reading by persons familiar with the technology. They are not used to limit the conditions under which the present invention can be implemented, and therefore have no substantial technical significance. Any structural modification, change in proportion or adjustment of size, without affecting the effects and purposes that can be achieved by the present invention, should still fall within the scope of the technical contents disclosed by the present invention.

[0029] Figure 1 A schematic diagram of the overall control system structure provided by the present invention;

[0030] Figure 2 A schematic diagram of the host security vulnerability detection system provided by the present invention;

[0031] Figure 3 A schematic diagram of the host security vulnerability risk monitoring and analysis system provided by the present invention;

[0032] Figure 4 A schematic diagram of the host dangerous vulnerability alarm system provided by the present invention;

[0033] Figure 5 A schematic diagram of the structure of the security vulnerability patch repair system provided by the present invention;

[0034] Figure 6 A schematic diagram of the structure of the security vulnerability handling system provided by the present invention;

[0035] Figure 7 A schematic diagram of the structure of the audio-visual alarm module provided by the present invention;

[0036] Figure 8 A schematic diagram of the local structure of the transmission mechanism provided by the present invention;

[0037] Fig. 9 A schematic diagram of the three-dimensional structure of the threaded rod and the sleeve provided by the present invention;

[0038] Fig.10 The present invention provides Fig. 9 A in the enlarged view;

[0039] In the figure: 1 host security vulnerability management system, 2 host security vulnerability detection system, 3 host security vulnerability risk monitoring and analysis system, 4 host dangerous vulnerability alarm system, 5 security vulnerability intrusion protection system, 6 security vulnerability patch repair system, 7 security vulnerability disposal system, 8 host system security vulnerability detection system, 9 host application security vulnerability detection system, 10 EXP vulnerability detection system, 11 POC vulnerability detection system, 12 host security information automatic identification system, 13 vulnerability risk level analysis system, 14 high-risk vulnerability monitoring system, 15 security risk level improvement system, 16 account abnormal login alarm system, 17 brute force cracking Login alarm system, 18 backdoor implant vulnerability alarm system, 19 local privilege escalation alarm system, 20 audio-visual alarm module, 21 vulnerability attack chain drawing analysis module, 22 vulnerability positioning module, 23 vulnerability reproduction module, 24 security patch matching module, 25 vulnerability complete repair module, 26 security vulnerability special verification module, 27 vulnerability special retest module, 28 cloud platform vulnerability notification module, 29 base, 30 support frame, 31 transmission motor, 32 transmission shaft, 33 reciprocating screw, 34 sleeve, 35 striking block, 36 bell, 37 round rod, 38 baffle, 39 connecting plate, 40 telescopic rod, 41 spring, 42 movable frame, 43 warning light. DETAILED DESCRIPTION

[0040] The preferred embodiments of the present invention are described below in conjunction with the accompanying drawings. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present invention, and are not used to limit the present invention.

[0041] See attached Figure 1 -Attached Fig.10 The present invention provides a host security risk vulnerability visualization management system, including

[0042] A host security vulnerability management system 1, the output end of the host security vulnerability management system 1 is connected to a host security vulnerability detection system 2, the output end of the host security vulnerability detection system 2 is connected to a host security vulnerability risk monitoring and analysis system 3, and the output end of the host security vulnerability risk monitoring and analysis system 3 is connected to a host dangerous vulnerability alarm system 4;

[0043] The output end of the host dangerous vulnerability alarm system 4 is connected to the security vulnerability intrusion protection system 5, the output end of the security vulnerability intrusion protection system 5 is connected to the security vulnerability patch repair system 6, and the output end of the security vulnerability patch repair system 6 is connected to the security vulnerability disposal system 7.

[0044] In this implementation scheme, the host security vulnerability management system 1 controls the host security vulnerability detection system 2 to detect and process the security vulnerabilities inside the host. After the vulnerability is detected, the host security vulnerability risk monitoring and analysis system 3 monitors and analyzes the risks of the detected security vulnerabilities. After the analysis is completed, the host dangerous vulnerability alarm system 4 alarms the dangerous vulnerability. After the alarm, the security vulnerability intrusion protection system 5 protects the security vulnerability to prevent the spread of the vulnerability. Then, the security vulnerability patch repair system 6 patches the security vulnerability. Finally, the security vulnerability disposal system 7 disposes of the existing security vulnerability to facilitate the next patch repair.

[0045] Among them, in order to achieve the purpose of vulnerability discovery and detection, the present device is implemented by the following technical solutions: the host security vulnerability detection system 2 includes a host system security vulnerability detection system 8 and a host application security vulnerability detection system 9, the host security vulnerability detection system 2 also includes an EXP vulnerability detection system 10 and a POC vulnerability detection system 11, the host security vulnerability risk monitoring and analysis system 3 includes a host security information automatic identification system 12 and a vulnerability risk level analysis system 13, the host security vulnerability risk monitoring and analysis system 3 also includes a high-risk vulnerability monitoring system 14 and a security risk level improvement system 15;

[0046] The host security vulnerability detection system 2 controls the host system security vulnerability detection system 8 to detect security vulnerabilities in the system inside the host, and then uses the host application security vulnerability detection system 9 to detect security vulnerabilities in the application inside the host, and then uses the EXP vulnerability detection system 10 to detect EXP vulnerabilities on the host, and finally uses the POC vulnerability detection system 11 to detect POC vulnerabilities on the host. After the detection is completed, the host security vulnerability risk monitoring and analysis system 3 controls the host security information automatic identification system 12 to automatically identify the security information of the host, and then uses the vulnerability risk level analysis system to analyze the risk level of the vulnerability that occurred. After the analysis is completed, the high-risk vulnerability monitoring system 14 is controlled to monitor the analyzed high-risk vulnerabilities, and finally the security risk level improvement system 15 is used to improve the corresponding vulnerability level judgment of the host;

[0047] Among them, in order to achieve the purpose of warning and repair, the present device adopts the following technical solutions: the host dangerous vulnerability alarm system 4 includes an account abnormal login alarm system 16 and a brute force login alarm system 17, the host dangerous vulnerability alarm system 4 also includes a backdoor implant vulnerability alarm system 18 and a local privilege escalation alarm system 19, the output end of the host dangerous vulnerability alarm system 4 is connected to an audio-visual alarm module 20, the security vulnerability patch repair system 6 includes a vulnerability attack chain line drawing analysis module 21 and a vulnerability positioning module 22, and the security vulnerability patch repair system 6 also includes a vulnerability reproduction module 23, a security patch matching module 24 and a vulnerability complete repair module 25;

[0048] The host dangerous vulnerability alarm system 4 controls the account abnormal login alarm system 16 to alarm the user when the host account logs in at an abnormal address, and then controls the brute force login alarm system 17 to alarm when brute force login occurs, and then uses the backdoor implant vulnerability alarm system 18 to alarm the backdoor implant vulnerability, and finally uses the main body privilege escalation alarm system to alarm the privilege escalation operation, and after the alarm, the security vulnerability patch repair system 6 controls the vulnerability attack chain line drawing analysis module 21 to draw a line analysis on the vulnerability attack route, and after the analysis is completed, the security vulnerability is located by the vulnerability location module 22, and then the located vulnerability is reproduced by the vulnerability reproduction module 23, and after the reproduction is completed, the vulnerability is patch matched by the security patch matching module 24, and after the matching is completed, the vulnerability is completely repaired by the vulnerability complete repair module 25;

[0049] Among them, in order to achieve the purpose of vulnerability handling, the present device is implemented by the following technical solutions: the security vulnerability handling system 7 includes a security vulnerability special verification module 26, a vulnerability special retest module 27 and a cloud platform vulnerability notification module 28;

[0050] The security vulnerability handling system 7 performs special verification work on the repaired security vulnerability through the security vulnerability special verification module 26, and then retests the special vulnerability through the control vulnerability special retest module 27 to prevent the vulnerability from remaining, and finally notifies the cloud platform of the repaired vulnerability through the cloud platform vulnerability notification module 28, so as to pay attention to and store the vulnerability to prevent the next similar vulnerability attack;

[0051] In order to achieve the purpose of alarm, the device adopts the following technical solutions: the audio-visual alarm module 20 includes

[0052] The base 29 is a circular structure, the top of the base 29 is fixedly connected to a support frame 30, and the outer side of the support frame 30 is provided with a plurality of lifting slots;

[0053] An alarm mechanism is arranged outside the support frame 30 and is used to provide visual and audio alarms to the user;

[0054] Transmission mechanism, the transmission mechanism is arranged inside the support frame 30, and the transmission mechanism is used to start the alarm mechanism;

[0055] The transmission mechanism includes a transmission motor 31, which is fixedly arranged at the bottom of the base 29. The output end of the transmission motor 31 is fixedly connected to a transmission shaft 32. The top end of the transmission shaft 32 penetrates to the outside of the top of the support frame 30. A reciprocating screw 33 is embedded in the support frame 30. A sleeve 34 is sleeved on the outside of the reciprocating screw 33. The reciprocating screw 33 and the sleeve 34 are connected through a ball screw pair. The sleeve 34 is set to a square structure. The outside of the sleeve 34 fits the inner wall of the support frame 30. Both sides of the sleeve 34 are fixedly connected with striking blocks 35. The two striking blocks 35 penetrate the two lifting slots respectively and extend to the outside of the support frame 30.

[0056] The alarm mechanism includes a plurality of bells 36, which are arranged on both sides of the support frame 30, and the front and rear sides of the plurality of bells 36 are fixedly connected with round rods 37, the inner sides of the plurality of bells 36 are provided with baffles 38, the outer sides of the plurality of baffles 38 are fixedly connected with two cross plates, and the two cross plates are respectively fixedly connected to the outer ends of the two round rods 37, the front and rear sides of the plurality of baffles 38 are fixedly connected with connecting plates 39, the inner sides of the plurality of connecting plates 39 are fixedly connected with telescopic rods 40, the plurality of telescopic rods 40 are respectively fixedly connected to both sides of the support frame 30, and the outer sides of the plurality of telescopic rods 40 are sleeved with springs 41;

[0057] A movable frame 42 is provided on the top of the support frame 30 . The movable frame 42 is fixedly sleeved on the outside of the transmission shaft 32 . A plurality of warning lights 43 are fixedly connected to the outside of the movable frame 42 .

[0058] The use process of the present invention is as follows: when a leak occurs, the audio-visual alarm module 20 controls the warning light 43 to work, causing the warning light 43 to flash, and at the same time starts the transmission motor 31 to work. The transmission motor 31 drives the transmission shaft 32 and the movable frame 42 to rotate. The rotation of the movable frame 42 causes the flashing warning light 43 to rotate, making the warning light 43 more dazzling. At the same time, the rotation of the transmission shaft 32 drives the threaded rod to rotate. The rotation of the threaded rod drives the sleeve 34 and the striking block 35 to move up and down. The striking block 35 moves up and down to reciprocate and strike the multiple baffles 38, thereby causing the multiple baffles 38 and the bell 36 to shake back and forth, so that the bell 36 further alarms the user.

[0059] The control system of the present invention works as follows:

[0060] S1: The host security vulnerability management system 1 controls the host security vulnerability detection system 2 to detect and process the security vulnerabilities inside the host. After the vulnerabilities are detected, the host security vulnerability risk monitoring and analysis system 3 monitors and analyzes the risks of the detected security vulnerabilities. After the analysis is completed, the host dangerous vulnerability alarm system 4 alarms the dangerous vulnerabilities. After the alarm, the security vulnerability intrusion protection system 5 protects the security vulnerabilities to prevent the spread of the vulnerabilities. Then, the security vulnerability patch repair system 6 patches the security vulnerabilities. Finally, the security vulnerability disposal system 7 disposes of the existing security vulnerabilities to facilitate the next patch repair work.

[0061] S2: The host security vulnerability detection system 2 controls the host system security vulnerability detection system 8 to detect security vulnerabilities in the system inside the host, and then uses the host application security vulnerability detection system 9 to detect security vulnerabilities in the application inside the host, and then uses the EXP vulnerability detection system 10 to detect EXP vulnerabilities on the host, and finally uses the POC vulnerability detection system 11 to detect POC vulnerabilities on the host. After the detection is completed, the host security vulnerability risk monitoring and analysis system 3 controls the host security information automatic identification system 12 to automatically identify the security information of the host, and then uses the vulnerability risk level analysis system to analyze the risk level of the vulnerability that occurred. After the analysis is completed, the high-risk vulnerability monitoring system 14 is controlled to monitor the analyzed high-risk vulnerabilities, and finally the security risk level improvement system 15 is used to improve the corresponding vulnerability level judgment of the host;

[0062] S3: The host dangerous vulnerability alarm system 4 controls the account abnormal login alarm system 16 to alarm the user when the host account logs in at an abnormal address, and then controls the brute force login alarm system 17 to alarm when a brute force login occurs, and then uses the backdoor implant vulnerability alarm system 18 to alarm the backdoor implant vulnerability, and finally uses the main body privilege escalation alarm system to alarm the privilege escalation operation. After the alarm, the security vulnerability patch repair system 6 controls the vulnerability attack chain line drawing analysis module 21 to draw a line analysis on the vulnerability attack route. After the analysis is completed, the security vulnerability is located by the vulnerability location module 22, and then the located vulnerability is reproduced by the vulnerability reproduction module 23. After the reproduction is completed, the vulnerability is patch matched by the security patch matching module 24. After the matching is completed, the vulnerability is completely repaired by the vulnerability complete repair module 25.

[0063] S4: The security vulnerability handling system 7 performs special verification work on the repaired security vulnerability through the security vulnerability special verification module 26, and then retests the special vulnerability through the control vulnerability special retest module 27 to prevent the vulnerability from remaining, and finally notifies the cloud platform of the repaired vulnerability through the cloud platform vulnerability notification module 28, so as to pay attention to and store this vulnerability to prevent the next similar vulnerability attack.

[0064] The above is only a preferred embodiment of the present invention. Any person skilled in the art may modify the present invention by using the above technical solution or modify it into an equivalent technical solution. Therefore, any simple modification or equivalent replacement made according to the technical solution of the present invention shall fall within the scope of protection claimed by the present invention.

Claims

1. A host security risk vulnerability visualization management system, characterized by: include A host security vulnerability management system (1), wherein an output end of the host security vulnerability management system (1) is connected to a host security vulnerability detection system (2), an output end of the host security vulnerability detection system (2) is connected to a host security vulnerability risk monitoring and analysis system (3), and an output end of the host security vulnerability risk monitoring and analysis system (3) is connected to a host dangerous vulnerability alarm system (4); The output end of the host dangerous vulnerability alarm system (4) is connected to a security vulnerability intrusion protection system (5), the output end of the security vulnerability intrusion protection system (5) is connected to a security vulnerability patch repair system (6), and the output end of the security vulnerability patch repair system (6) is connected to a security vulnerability disposal system (7).

2. A host security risk vulnerability visual management system according to claim 1, characterized in that: The host security vulnerability detection system (2) comprises a host system security vulnerability detection system (8) and a host application security vulnerability detection system (9), and the host security vulnerability detection system (2) further comprises an EXP vulnerability detection system (10) and a POC vulnerability detection system (11).

3. A host security risk vulnerability visual management system according to claim 1, characterized in that: The host security vulnerability risk monitoring and analysis system (3) comprises a host security information automatic identification system (12) and a vulnerability risk level analysis system (13), and the host security vulnerability risk monitoring and analysis system (3) further comprises a high-risk level vulnerability monitoring system (14) and a security risk level improvement system (15).

4. A host security risk vulnerability visual management system according to claim 1, characterized in that: The host dangerous vulnerability alarm system (4) comprises an abnormal account login alarm system (16) and a brute force login alarm system (17), the host dangerous vulnerability alarm system (4) further comprises a backdoor implantation vulnerability alarm system (18) and a local privilege escalation alarm system (19), and an audio-visual alarm module (20) is connected to the output end of the host dangerous vulnerability alarm system (4).

5. The host security risk vulnerability visual management system according to claim 1 is characterized by: The security vulnerability patch repair system (6) comprises a vulnerability attack chain line drawing analysis module (21) and a vulnerability positioning module (22), and the security vulnerability patch repair system (6) further comprises a vulnerability reproduction module (23), a security patch matching module (24) and a vulnerability complete repair module (25).

6. A host security risk vulnerability visual management system according to claim 1, characterized in that: The security vulnerability handling system (7) comprises a security vulnerability special verification module (26), a vulnerability special retest module (27) and a cloud platform vulnerability notification module (28).

7. A host security risk vulnerability visual management system according to claim 4, characterized in that: The audio-visual alarm module (20) comprises A base (29), wherein the base (29) is configured as a circular structure, a support frame (30) is fixedly connected to the top of the base (29), and a plurality of lifting slots are provided on the outer side of the support frame (30); An alarm mechanism, the alarm mechanism being arranged outside the support frame (30) and being used for providing visual and audio alarms to the user; A transmission mechanism is arranged inside the support frame (30), and is used to start the alarm mechanism.

8. A host security risk vulnerability visual management system according to claim 7, characterized in that: The transmission mechanism comprises a transmission motor (31), the transmission motor (31) is fixedly arranged at the bottom of the base (29), the output end of the transmission motor (31) is fixedly connected with a transmission shaft (32), the top end of the transmission shaft (32) passes through the outside of the top of the support frame (30), a reciprocating screw (33) is embedded in the support frame (30), a sleeve (34) is sleeved on the outside of the reciprocating screw (33), the reciprocating screw (33) and the sleeve (34) are connected through a ball screw pair, the sleeve (34) is set as a square structure, the outside of the sleeve (34) is in contact with the inner wall of the support frame (30), and striking blocks (35) are fixedly connected to both sides of the sleeve (34), and the two striking blocks (35) respectively pass through the two lifting slots and extend to the outside of the support frame (30).

9. A host security risk vulnerability visual management system according to claim 8, characterized in that: The alarm mechanism comprises a plurality of bells (36), the plurality of bells (36) are arranged on both sides of the support frame (30), the front and rear sides of the plurality of bells (36) are fixedly connected to round rods (37), the inner sides of the plurality of bells (36) are provided with baffles (38), the outer sides of the plurality of baffles (38) are fixedly connected to two transverse plates, the two transverse plates are respectively fixedly connected to the outer ends of the two round rods (37), the front and rear sides of the plurality of baffles (38) are fixedly connected to connecting plates (39), the inner sides of the plurality of connecting plates (39) are fixedly connected to telescopic rods (40), the plurality of telescopic rods (40) are respectively fixedly connected to both sides of the support frame (30), and the outer sides of the plurality of telescopic rods (40) are sleeved with springs (41); A movable frame (42) is provided on the top of the support frame (30), and the movable frame (42) is fixedly sleeved on the outside of the transmission shaft (32). A plurality of warning lights (43) are fixedly connected to the outside of the movable frame (42).

10. The host security risk vulnerability visualization management system according to claim 1, characterized in that: The following steps are also included: S1: The host security vulnerability management system (1) controls the host security vulnerability detection system (2) to detect and process the security vulnerabilities inside the host. After the vulnerabilities are detected, the host security vulnerability risk monitoring and analysis system (3) monitors and analyzes the risks of the detected security vulnerabilities. After the analysis is completed, the host dangerous vulnerability alarm system (4) alarms the dangerous vulnerabilities. After the alarm, the security vulnerability intrusion protection system (5) protects the security vulnerabilities to prevent the spread of the vulnerabilities. Then, the security vulnerability patch repair system (6) patches the security vulnerabilities. Finally, the security vulnerability disposal system (7) disposes of the existing security vulnerabilities to facilitate the next patch repair work. S2: The host security vulnerability detection system (2) controls the host system security vulnerability detection system (8) to detect security vulnerabilities in the system inside the host, and then uses the host application security vulnerability detection system (9) to detect security vulnerabilities in the application inside the host, and then uses the EXP vulnerability detection system (10) to detect EXP vulnerabilities in the host, and finally uses the POC vulnerability detection system (11) to detect POC vulnerabilities in the host. After the detection is completed, the host security vulnerability risk monitoring and analysis system (3) controls the host security information automatic identification system (12) to automatically identify the security information of the host, and then uses the vulnerability risk level analysis system to analyze the risk level of the vulnerability. After the analysis is completed, the high-risk vulnerability monitoring system (14) is controlled to monitor the analyzed high-risk vulnerabilities, and finally the security risk level improvement system (15) is used to improve the corresponding vulnerability level judgment of the host; S3: The host dangerous vulnerability alarm system (4) controls the account abnormal login alarm system (16) to alarm the user when the host account logs in at an abnormal address, and then controls the brute force login alarm system (17) to alarm when a brute force login occurs. Then, the backdoor implant vulnerability alarm system (18) is used to alarm the backdoor implant vulnerability. Finally, the main body privilege escalation alarm system is used to alarm the privilege escalation operation. After the alarm, the security vulnerability patch repair system (6) controls the vulnerability attack chain line drawing analysis module (21) to perform line drawing analysis on the vulnerability attack route. After the analysis is completed, the security vulnerability is located by the vulnerability location module (22). Then, the located vulnerability is reproduced by the vulnerability reproduction module (23). After the reproduction is completed, the vulnerability is patched by the security patch matching module (24). After the matching is completed, the vulnerability is completely repaired by the vulnerability complete repair module (25); S4: The security vulnerability handling system (7) performs special verification work on the repaired security vulnerability through the security vulnerability special verification module (26), and then retests the special vulnerability through the control vulnerability special retest module (27) to prevent the vulnerability from remaining. Finally, the cloud platform vulnerability notification module (28) notifies the cloud platform of the repaired vulnerability, so as to pay attention to and store the vulnerability to prevent the next similar vulnerability attack.

Images