中圖分類號： TP391
文獻標識碼： A
DOI： 10.19358/j.issn.2096-5133.2022.05.003
引用格式： 張慕榕，張尼，許鳳凱，等. 基于知識圖譜的軟件配置漏洞分析技術(shù)研究[J].信息技術(shù)與網(wǎng)絡安全，2022，41(5)：17-24.

Research on software configuration vulnerability analysis technology based on knowledge graph

Abstract： With the development of science and technology, the software is also updated day by day, its function and structure are more complex and changeable, and the security problems caused by the associated software configuration loopholes are also increasing day by day. The traditional manual configuration verification is not only time-consuming and energy-intensive, but also inefficient. It cannot meet the needs of ensuring the security of software configuration in a timely and efficient manner. The development of knowledge graphs is gradually showing results in various fields. Therefore, this paper integrates and stores software configuration vulnerability data by building a software configuration vulnerability knowledge map, and achieves functions such as visual reasoning analysis and correlation query, so as to achieve the goal of more intelligent software configuration vulnerability analysis.

Key words : knowledge graph；security configuration；data processing；knowledge fusion；graph building