Scanner with alarm function, and method

Abstract

The invention discloses a scanner with an alarm function and a method; the scanner main comprises the following structures: a request module used by a user to send a HTTP request to a WEB server; a scanning rule obtaining module used for obtaining a scanning rule database matched with the HTTP request and an unmatched rule database in a rule alarm module, wherein the scanning rule database comprises a safety leak related to the HTTP request; a safety scanning module sued for carrying out safety scanning for the HTTP request according to the scanning rule database; the rule alarm module used for alarming the unmatched scanning rule database, and storing the unmatched scanning rule database in the scanning rule obtaining module. The scanner with the alarm function and method are used for improving safety scanning efficiency, saving safety scanning consumption resources, and realizing the real-time alarming function.

Description

technical field [0001] The invention relates to the field of information security, in particular to a scanning device and method with an alarm function. Background technique [0002] Network attackers usually attack the security vulnerabilities of software and programs to obtain server management defects, steal corporate secrets, and modify server content. The process of matching known web server security vulnerabilities. However, there are as many as thousands of WEB server security vulnerabilities known at present, and with the continuous release of new versions of WEB server software, the release of new WEB server software and the continuous exploration of malicious personnel, more vulnerabilities are constantly being discovered . Therefore, the scanning rule base used for security scanning is getting bigger and bigger, which leads to more and more resources consumed and longer time-consuming scanning when the security protection device is scanning, and there is no alar...

AI Technical Summary

Problems solved by technology

However, there are as many as thousands of known web server security vulnerabilities, and with the continuous release of new versions of web server software and the continuous exploration of new web server software and malicious personnel, more vulnerabilities are constantly being discovered

Therefore, the scanning rule library used for security scanning is getting bigger and bigger, which leads to more and more resources consumed and longer time-consuming scanning when the security protection device is scanning, and there is no alarm for unmatched rules. Function

Images