Ä¿½ñÎó²î¿âÓÐÄÄЩ
Îó²î¿âÊÇÍøÂçÒÑÖªÎó²îÐÅÏ¢µÄÊý¾Ý¿â£¬¹ØÓÚʶ±ðºÍÖÎÀíÈí¼þÎó²îÖÁ¹ØÖ÷Òª¡£ÒÔÏÂÊǼ¸¸öÊ¢ÐеÄÎó²î¿â£º¹ú¼ÒÎó²îÊý¾Ý¿â (nvd)£ºÕþ¸®Î¬»¤µÄ×ÛºÏÐÔÊý¾Ý¿â¡£Í¨ÓÃÎó²îºÍ̻¶ (cve)£ºÓÃÓÚʶ±ðºÍ¸ú×ÙÎó²îµÄ±ê×¼»¯ÏµÍ³¡£mitre ¹¥»÷ÊÖÒÕ¿â (att&ck)£ºÐÎò¹¥»÷ÕßʹÓõÄÕ½Êõ¡¢ÊÖÒպͳÌÐòµÄ֪ʶ¿â¡£bugzilla£º¿ªÔ´Îó²î¸ú×Ùϵͳ£¬ÓÃÓÚÖÎÀíºÍ¸ú×ÙÈí¼þȱÏÝ¡£Çå¾²½¹µã bugtraq£º°üÀ¨ÒÑÖªÎó²îÏêϸÐÅÏ¢µÄÎó²îÊý¾Ý¿â¡£Ñ¡ÔñºÏÊʵÄÎó²î¿âʱ£¬ÐèҪ˼Á¿ÁýÕÖ¹æÄ£¡¢×¼È·ÐÔ¡¢ÊµÊ±ÐÔ¡¢Óû§½çÃæºÍ¼¯³ÉÄÜÁ¦¡£
Ä¿½ñÎó²î¿â
Îó²î¿âÊÇÍøÂçºÍά»¤ÒÑÖªÎó²îÐÅÏ¢µÄÊý¾Ý¿â¡£ËüÃǹØÓÚʶ±ð¡¢¸ú×ÙºÍÖÎÀíÈí¼þÎó²îÖÁ¹ØÖ÷Òª¡£
µ±½ñÊг¡Éϱ£´æ×ŶàÖÖÎó²î¿â£¬Ã¿¸ö¿â¶¼ÓÐ×Ô¼ºÆæÒìµÄÓÅÊƺÍÈõµã¡£ÒÔÏÂÊÇһЩ×îÊ¢ÐеÄÎó²î¿â£º
- ¹ú¼ÒÎó²îÊý¾Ý¿â (NVD)£ºNVD ÊÇÃÀ¹ú¹ú¼Ò±ê×¼ÓëÊÖÒÕÑо¿Ëù (NIST) ά»¤µÄÃÀ¹úÕþ¸®Îó²î¿â¡£ËüÊÇÒ»¸ö×ÛºÏÐÔÊý¾Ý¿â£¬°üÀ¨À´×ÔÖÖÖÖȪԴµÄÒÑÖªÎó²î¡£
- ͨÓÃÎó²îºÍ̻¶ (CVE)£ºCVE ÊÇÒ»ÖÖ±ê×¼»¯µÄÈ«Çòϵͳ£¬ÓÃÓÚʶ±ðºÍ¸ú×ÙÒÑÖªµÄÎó²î¡£ËüΪÿ¸öÎó²î·ÖÅÉÒ»¸öΨһµÄ±êʶ·û (CVE-ID)£¬²¢ÌṩÓйØÎó²îµÄÏêϸÊÖÒÕÐÅÏ¢¡£
- Mitre ¹¥»÷ÊÖÒÕ¿â (ATT&CK)£ºATT&CK ÊÇ Mitre ¹«Ë¾Î¬»¤µÄÒ»¸ö֪ʶ¿â£¬ÓÃÓÚÐÎò¹¥»÷ÕßʹÓõÄÕ½Êõ¡¢ÊÖÒպͳÌÐò (TTP)¡£Ëü°üÀ¨ÖÖÖÖ¸÷ÑùµÄÎó²îºÍ¹¥»÷ÏòÁ¿¡£
- Bugzilla£ºBugzilla ÊÇÒ»¸ö¿ªÔ´Îó²î¸ú×Ùϵͳ£¬ÓÃÓÚÖÎÀíºÍ¸ú×ÙÈí¼þȱÏÝ¡£ËüÔÊÐí¿ª·¢Ö°Ô±ºÍÇå¾²Ñо¿Ö°Ô±±¨¸æºÍ¸ú×ÙÎó²î¡£
- Çå¾²½¹µã£ºÇå¾²½¹µãÊÇÒ»¸öÌṩÇå¾²ÐÂÎÅ¡¢Îó²îÐÅÏ¢ºÍ¹¤¾ßµÄÍøÕ¾¡£Ëüά»¤×ÅÒ»¸öÃûΪ Bugtraq µÄÎó²îÊý¾Ý¿â£¬ÆäÖаüÀ¨ÓйØÒÑÖªÎó²îµÄÏêϸÊÖÒÕÐÅÏ¢¡£
Ñ¡ÔñºÏÊʵÄÎó²î¿âÈ¡¾öÓÚ×éÖ¯µÄÌض¨ÐèÇóºÍÆ«ºÃ¡£ÒÔÏÂÊÇһЩ˼Á¿ÒòËØ£º
- ÁýÕÖ¹æÄ££ºÎó²î¿âº¸ÇµÄÎó²îÊýÄ¿ºÍÖÖÀà¡£
- ׼ȷÐÔ£ºÎó²î¿âÖÐÐÅÏ¢µÄ׼ȷÐԺͿɿ¿ÐÔ¡£
- ʵʱÐÔ£ºÎó²î¿â¸üÐÂƵÂÊ£¬È·±£Çå¾²ÍŶÓʵʱÏàʶÐÂÎó²î¡£
- Óû§½çÃ棺Îó²î¿âµÄÓû§ÓѺÃÐÔºÍÒ×ÓÃÐÔ¡£
- ¼¯³É£ºÎó²î¿âÓëÆäËûÇå¾²¹¤¾ß£¨ÈçÎó²îÖÎÀíϵͳ£©µÄ¼¯³ÉÄÜÁ¦¡£
ÒÔÉϾÍÊÇÄ¿½ñÎó²î¿âÓÐÄÄЩµÄÏêϸÄÚÈÝ£¬¸ü¶àÇë¹Ø×¢±¾ÍøÄÚÆäËüÏà¹ØÎÄÕ£¡