Vulnerability detection system based on large ISP interconnection port and method thereof

Abstract

The invention discloses a vulnerability detection system based on a large ISP interconnection port and a method thereof. The method comprises the steps that a URL collecting system collects network data when getting access to URLs on the internet, obtains and transmits the URL network data to a data preprocessing server in a timing mode; the data preprocessing server filters out the URL network data with URL suffix names conforming to .action or .do, and stores the data to a data storage server; the data storage server stores the URL network data; a struts 2 vulnerability detection system tests whether vulnerability exists in a website corresponding to each URL item by item and stores the data to a database server; the database server stores and detects URL records with vulnerability; a display system reads and displays the URL records with the vulnerability The vulnerability detection system can provide web vulnerability information for all the websites in an education network, the vulnerability can be restored conveniently in time, and serious loss is avoided.

Description

technical field [0001] The present invention relates to the field of computer network security, more specifically, relates to an apache struts2 loophole detection system and method based on a large ISP interconnection port, which is used to provide web loophole information for each website in the education network. Background technique [0002] In recent years, with the rapid development of China's Internet industry, information networks have become an important guarantee for social development. A lot of network data is sensitive information, even state secrets, so it is inevitable that it will attract human attacks from all over the world. Struts2 is an open source project of the Jakarta project team of the Apache Foundation. At present, Struts2 is widely used in the construction of large-scale Internet companies, governments, financial institutions and other websites, and is used as the underlying template for website development. It is one of the most widely used web appl...

AI Technical Summary

Problems solved by technology

As a result, the website was not upgraded in time, and some automated and fool-like tools began to appear. Filling in the address can directly execute server commands, read data or even shut down directly.

Images