Abstract: In the field of information security，Network security vulnerability scanning is essential to the assessment of the security of the system.The Network security vulnerability is reclassified according to the relevance of the vulnerability threat.It analyses the main technology of vulnerability scanning,advances the method to develop plugin,and proposes the way to classify vulnerability plugin.The plugin structural model and designing process are given,which can achieve the targeted vulnerability scanning,making it convenient to update quickly the new scanning plugin.

Key words: information security; threat; vulnerability scanning; plugin