基于SSM+ZD的漏洞管理平台设计与实现

Design and Implementation of Vulnerability Management Platform Based on SSM+ZD

针对互联网信息安全事件频频发生,安全漏洞爆出频繁,用户难以管理平台漏洞问题进行分析研究,通过对国内外的漏洞管理平台的进行整理收集,后台采用了SSM框架,并集合了Zookeeper+Dubbo分布式模块,开发并设计了漏洞管理平台。漏管平台可以实时监测各主机状态,统计分析主机的漏洞分布情况,并对漏洞扫描结果进行图表展示,并提供相应处理办法。平台主要包括基础管理,漏洞管理和数据中心三大模块,实验结果表明漏洞查询具有高效的检测效率及正确率,系统运行稳定、效果良好,并具有良好的扩展性和维护性。

In view of the frequent occurrence of Internet information security incidents,the frequent loopholes in security breaches and the difficulty of users in managing platform vulnerabilities,the SSM framework is adopted in the background and the Zookeeper ＋ Dubbo Distributed module,developed and designed a vulnerability management platform.The leaky pipe platform can monitor the status of each host in real time,statistically analyze the distribution of vulnerabilities of the host,display the result of the vulnerability scanning and provide corresponding solutions.The platform mainly includes three modules：basic management,vulnerability management and data center.The experimental results show that the vulnerability detection has high detection efficiency and correctness.The system runs stably with good effect and has good scalability and maintainability.