面向网络资产漏洞评估的设备指纹搜索引擎构建方法

网络资产漏洞评估技术对于梳理互联网资产、实现网络资产漏洞安全管理起到十分重要的作用.已有方法因无法有效获取设备指纹信息而产生评估结果准确度低、功能单一等问题.为此，本文提出一种面向网络资产漏洞评估的设备指纹搜索引擎构建方法，具有多接口、交互性强、减少网络冗余探测的优势.本文通过统计和评估真实网络中的服务器类型、HTTPS协议漏洞来验证方法的高效性.

Construction Method of Device Fingerprinting Search Engine for Network Asset Vulnerability Assessment

The network asset vulnerability assessment technology plays an important role in sorting out Internet assets and realizing the security management of network asset vulnerabilities.The existing methods have the issues such as low accuracy of evaluation results and single function due to the inability to effectively obtain the fingerprinting information of the device.Therefore,this paper proposes a construction method of device fingerprinting search engine for network asset vulnerability assessment,which has the advantages of multiple interfaces,strong interactivity,and reduced network redundancy detection.This paper verifies the efficiency of the method by counting and evaluating server types and HTTPS protocol vulnerabilities in real networks.