Security vulnerability grading evaluation method and device, equipment and storage medium

• Main Authors: XU MENG, HAN JIASHUO
• Format: Patent
• Language: Chinese; English
• Published: 12.11.2024
• Subjects: CALCULATING; COMPUTING; COUNTING; ELECTRIC DIGITAL DATA PROCESSING; PHYSICS

The invention provides a grading evaluation method and device for security vulnerabilities, equipment and a storage medium, and the grading evaluation method comprises the steps: respectively carrying out the grading evaluation of the security vulnerabilities from two main evaluation dimensions, namely the technical difficulty of triggering the security vulnerabilities and the importance of assets affected by the security vulnerabilities in a target business system; grading evaluation is performed on the security vulnerabilities scanned in the target business system, so that the final grading evaluation result not only can reflect the security risks of the security vulnerabilities in the general technical dimension, but also can reflect the security risks of the security vulnerabilities in the special business dimension corresponding to the target business system. Therefore, the grading evaluation result of the security vulnerabilities can be matched with the specific risk evaluation requirement of the target