Research And Implementation Of Vulnerability Analysis Technology Based On Text Features

With the rapid development and popularization of the Internet,security vulnerabilities are also increasing.These security vulnerabilities will bring great risks and challenges to cyberspace security.In vulnerability management,the vulnerability analysis technology can effectively grasp the details of the vulnerability and analyze the vulnerability threat,and help control and reduce the security risks caused by the vulnerability.However,current vulnerability analysis techniques rely heavily on expert knowledge,are cumbersome and time-consuming.The thesis will mainly study the text characteristics of vulnerabilities and apply them to the field of vulnerability analysis to solve these problems.The thesis research content of this article is as follows:1.A security vulnerability risk assessment method based on deep learning is proposed.This method uses the timeliness and semantic richness of the vulnerability description text,uses the deep learning model to extract text features and combines text multi-classification to perform multiple CVSS-based vulnerability risk assessment indicators automated analysis.This method can assist researchers to complete vulnerability analysis in a timely and reliable manner.2.A security vulnerability similarity measurement method based on vulnerability characteristics is proposed.This method is based on the semantic richness of vulnerability description texts and the effectiveness of vulnerability risk assessment indicators for displaying vulnerability characteristics.A measurement system is established to measure the similarity between security vulnerabilities.And realized the analysis and retrieval of similar vulnerabilities.This method reduces the dependence on expert knowledge and experience,can explore the use value of historical vulnerability data,and provide researcher with a certain reference value of vulnerability information in the work of analyzing and evaluating new vulnerabilities.3.Combined with the vulnerability analysis technology and practical application environment proposed in the thesis,a vulnerability analysis system based on text features is designed and implemented.The system can complete vulnerability risk assessment and similar vulnerability measurement analysis,which will reduce the workload of researchers when analyzing vulnerabilities,and assist the analysis and research of security vulnerabilities.