关键词: 网络安全, 漏洞信息聚类, 漏洞修复

Abstract: In order to solve the problem that the traditional vulnerability remediation strategy is difficult to determine the prioritization of the same vulnerability severity level, this paper proposes a hierarchical vulnerability remediation model based on vulnerability type clustering (VR-VTC). Firstly, the PSO-K-means (particle swarm optimization K-means) algorithm is used to achieve clustering of vulnerability information. According to the percentage of the high, medium and low of each vulnerability type, the threat factor of every vulnerability type is calculated. Then, the vulnerabilities of target host are divided into four levels: the host, the vulnerability type threat level, the vulnerability type and the vulnerability. The hierarchical vulnerability remediation method based on vulnerability type is given, which uses the hierarchical idea which fixes the vulnerabilities from bottom to top and from local to global. The experimental results demonstrate that the model can provide the fine-grained vulnerability remediation strategy for the user.

Key words: network security, vulnerability information clustering, vulnerability remediation