网络安全漏洞管理与漏洞情报库建设分析

Analysis of network security vulnerability management and vulnerability information database construction

发达的网络技术为人们的生产生活提供了极大的便利,但同时也为不法分子造就了一定的可乘之机。众多逐渐曝光的网络安全漏洞若被有心之人利用将会对企业造成经济损失,因此,展开漏洞管理保障网络安全成为了重要内容。基于此,本文探究网络安全管理背景下的漏洞全生命周期管理要求,并结合网络安全漏洞管理平台的建设,对其基础架构和应用场景等展开研究,提出了漏洞情报库的建设思路,以期为相关企业提供参考。

The developed network technology provides great convenient conditions for people's production and life,but at the same time for the criminals have created a certain opportunity.Many gradually exposed network security vulnerabilities if used by interested people will cause economic losses to enterprises,so the launch of vulnerability management to ensure network security has become an important content.Based on this,this paper explores the vulnerability full life cycle management requirements under the background of network security management,and combined with the construction of network security vulnerability management platform,the infrastructure and application scenarios are studied,and puts forward the construction ideas of vulnerability information database,in order to provide reference for related enterprises.