Vul Tracker漏洞管理与自动化跟踪平台

Vul Tracker platform for vulnerability management and automatic tracking

针对当前漏洞管理系统受制于漏洞扫描引擎,在可扩展性和性能上存在瓶颈的问题,设计并实现了一个漏洞自动化跟踪平台.该平台可统一管理各种渠道获得的信息系统漏洞信息,每个漏洞关联一个检测其是否已修复的检测脚本及参数,多进程方式并行执行的任务调度程序高频度复测漏洞状态,可扩展到多机部署进一步扩展性能.漏洞检测脚本以退出代码反馈测试结果,支持任何能在部署操作系统上执行的语言编写,并能被相似漏洞复用.开放的数据接口将本平台与IT资产数据库和流程管理系统对接,已完成的两套实际部署案例表明本平台对提高漏洞处置效率发挥了积极的作用.

Restricted by the scanning engines,existing vulnerability management systems suffer limitations in extensibility and performance.A platform for automated vulnerability tracking was proposed,which allowed unified management of vulnerabilities from all sources.Every vulnerability was associated with a script for fix verification,and the multi-process task scheduler performed frequent retests in parallel,whose performance could be further improved with a distributed deployment.As exit code was used to indicate the test results,vulnerability test scripts could be written in any executable programming language,and could be shared by similar vulnerabilities.Open data interfaces were developed to allow integration of this platform with other IT asset and workflow management systems.There are already two successful deployments of this platform,and the result shows that it can effectively speed up the process of vulnerability remediation.