SECURITY VULNERABILITY DEFENSE METHOD AND DEVICE

Title:

SECURITY VULNERABILITY DEFENSE METHOD AND DEVICE

Document Type and Number:

WIPO Patent Application WO/2021/077987

Kind Code:

A1

Abstract:

A security vulnerability defense method and device. The method comprises: a vulnerability management device acquiring asset information of assets of a first network device, wherein the asset information comprises asset identification, asset model, and asset version, and the first network device is located within a controlled network; the vulnerability management device acquiring, on the basis of the asset model and asset version in the asset information, vulnerability information corresponding to the asset information; and the vulnerability management device determining a vulnerability response playbook corresponding to the vulnerability information, wherein the vulnerability response playbook is used for executing, after being parsed, a vulnerability defense strategy for the first network device. By executing the method, it is possible to quickly match and discover the security vulnerabilities in a network device, generate and execute a vulnerability defense strategy in time, and perform emergency protection on the network device, so as to prevent the network device from being attacked before receiving a vulnerability patch, which affects the security of network operation.

Inventors:

JIANG WU (CN)

Application Number:

PCT/CN2020/117834

Publication Date:

April 29, 2021

Filing Date:

September 25, 2020

Export Citation:

Click for automatic bibliography generation Help

Assignee:

HUAWEI TECH CO LTD (CN)

International Classes:

H04L29/06

Domestic Patent References:

WO2014048257A1	2014-04-03
WO2018177210A1	2018-10-04

Foreign References:

CN109818984A	2019-05-28
CN105939311A	2016-09-14
CN102624717A	2012-08-01
CN109639720A	2019-04-16
CN201911007623A	2019-10-22

Other References: