The invention discloses a
network security vulnerability identification and
repair method and
system, a medium and a program product, and the method comprises the steps: segmenting a
system behavior sequence into a plurality of subsequences; constructing a behavior
dependency graph; calculating
functional similarity, and dividing the
functional similarity into node clusters; calculating a behavior consistency
score, and determining a potential
vulnerability region; determining call chain information; constructing a
vulnerability propagation path, and calculating criticality; dividing first-level
hazard vulnerabilities, second-level
hazard vulnerabilities and third-level
hazard vulnerabilities according to the criticality; determining a repair priority, and generating a vulnerability report; according to the vulnerability types, the repair priorities and the propagation path information, corresponding repair strategies are sequentially matched from a preset repair
template library according to the sequence of the repair priorities; and performing hierarchical repair on the application code based on the repair strategy obtained by matching to obtain a repair code, and deploying the repair code to the target
system. According to the invention, the accuracy and efficiency of identifying and repairing
network security vulnerabilities are improved.