Method, device and system for network security scanning

Abstract

The embodiment of the invention relates to a method, a device and a system for network security scanning, wherein the method for network security scanning comprises the following steps: sending a network security scanning command to a target host in an internal network through a webpage file preset in the internal network; performing network security scanning on the target host in the internal network; and receiving a scan result through the webpage file, wherein the webpage file establishes a socket interface communicated with the target host. The method, the device and the system for network security scanning of the embodiment of the invention do not need install any agent software on the target host in the internal network, do not need open other ports for connecting the agent software and an external network security scanner so as not to set different network security scanners aiming at different agent software, and can greatly improve the security, reliability and universality of the network security scanning.

Description

technical field [0001] The present invention relates to the field of security technology, in particular to a network security scanning method, device and system. Background technique [0002] The rapid development of the Internet (Internet) has brought great convenience to people's life and work, but at the same time, it has also brought about the security of network information. It is a good way to prevent security incidents in the network system before they occur, and to find problems and solve them in time, so network security vulnerability scanning technology came into being. At present, network security scanners are usually used for network security vulnerability scanning. Network security scanners are a program that automatically detects security vulnerabilities of remote or local hosts. By using network security scanners, various TCP port allocations of remote servers can be found , the services provided and their software versions, and by testing the services and so...

AI Technical Summary

Problems solved by technology

[0004] The inventor found in the process of realizing the present invention that the network security scanning method in the prior art needs to install the agent software on the target host computer inside the network, the agent software is an executable program, and it also needs to connect the agent software with the network. The connection of the security scanner opens a port at the boundary of the internal networ

Images