The invention provides a
system vulnerability attack processing method, a program product, a storage medium and equipment, and the method comprises the steps: constructing an initial
attack graph based on asset topology data and component
vulnerability data of a target
system, considering the influence brought by a
security policy of asset configuration, determining the
attack success probability corresponding to each edge in the initial
attack graph, and determining the attack success probability of each edge in the initial
attack graph; the method comprises the following steps of: obtaining an initial
attack graph, optimizing the initial attack graph according to the initial attack graph to obtain an optimized attack graph, and then solving a
minimum cut set in the optimized attack graph to generate a set of minimum edges capable of
cutting off all paths from an initial node to a final node, namely a minimum disposal set. Therefore, by analyzing the minimum disposal set on the constructed attack graph, the
vulnerability disposal efficiency is effectively improved, the security operation cost is reduced, and meanwhile, the attack graph is optimized according to the
security policy of asset configuration, so that the information expression of the attack graph is more accurate, and the vulnerability disposal accuracy is improved.