Research Of Enterprise Security Vulnerability Management Method Based On Python

With the wide spread of Internet, the life of people has been deeply changed. The system and mode of production has been altered. The system is exposed to hackers owing to technology vulnerability as productivity increasing so much, which may lead to calamity for company. The risk of vulnerability will be decreased quickly if vulnerability can be managed effectively, issued and fixed timely. So it’s significant for product related to computer technology to research enterprise security vulnerability management method and build standard vulnerability management system.At first, the paper introduces the circumstance of network security and the necessity of building secure vulnerability database. It analyzes the development of the worldwide famous vulnerability database by comparison. It also defines security vulnerability and summarizes the feature and classification of security vulnerability and introduces authoritative way of issuing vulnerability. The paper discusses Python and the feasibility of crawler program using Python after studying crawler’s definition and theory. Vulnerability database is based on those theories.Then the paper concentrates on designing vulnerability management platform, which introduces the architecture and the principal of core module on vulnerability management platform in detail. The enterprise vulnerability management platform captures the targeted vulnerability in vulnerability database by vulnerability crawling module, parses vulnerability information by vulnerability parsing module and stores vulnerability information in local servers by database operating module. It will ensure the complete targeted vulnerability information.Finally, the paper proposes enterprise vulnerability description language. The author was in charge of dealing with vulnerability as intern in a company. Enterprise vulnerability description language is custom-made to suit dealing enterprise vulnerability inside to normalize the stored vulnerability information in management platform. It implements vulnerability data exchange in company smoothly.