安全漏洞标识与描述规范的研究

The Development of the Vulnerability Identification and Description Specification

文章主要介绍了中国首个安全漏洞相关国家标准《安全漏洞标识与描述规范》的制定背景及其主要内容。该标准以CVD作为安全漏洞的唯一标识,用于满足国内互联网对漏洞进行统一引用的需求,是中国有效管理安全漏洞的基础标准。

This paper mainly introduces the background and content of the vulnerability identification and description, which is the China’s first national standard for vulnerabilities. In order to satisfy domestic demand for a unified reference of vulnerabilities, the standard proposes CVD （Common Vulnerabilities Description） as a unique identifier to describe the vulnerability, which is a basic standard to effectively manage the vulnerabilities in China.