Security risk management and control method and device, equipment and medium

The invention provides a security risk management and control method and device, equipment and a medium, and the method comprises the steps: calling one or more scanning omission engines associated with a created risk detection task, executing the risk detection task through the associated one or mo...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: YANG RONGJIAN, ZENG FENG, ZHOU XI, YAO ZHIQIANG, WANG CHENGYAO, MAO SHIHANG, LIU LANQING
Format: Patent
Sprache:chi ; eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:The invention provides a security risk management and control method and device, equipment and a medium, and the method comprises the steps: calling one or more scanning omission engines associated with a created risk detection task, executing the risk detection task through the associated one or more scanning omission engines, and obtaining an execution result; checking the execution result according to the role permission, and obtaining a repair task according to the check result to repair the detected risk. According to the invention, the role permission is used for tracking and checking the vulnerability, risk closed-loop management is formed, orderly execution of risk monitoring can be effectively guaranteed, and the efficiency is improved. 本发明提出一种安全风险管控方法、装置、设备和介质,包括:调用与创建的风险检测任务关联的一个或多个漏扫引擎,并通过所述关联的一个或多个漏扫引擎,执行所述风险检测任务,获取执行结果;根据角色权限对所述执行结果进行检验,并根据所述检验结果获取修复任务对检测到的风险进行修复;本发明角色权限对漏洞进行跟踪检验,形成风险闭环管理,可有效保障风险监测有序执行,提高效率。