Website attack verification method and device

Abstract

The invention provides a website attack verification method and device. Keyword matching and HTTP state code matching are conducted through attack logs, attacks which can be graded without having access to a webpage are filtered out in advance, URLs of remaining attacks are automatically submitted, HTTP return packet information and webpage source codes corresponding to the remaining attacks are acquired by having access to the webpage, and the remaining attacks are determined to be with threats and without threats and to be manually verified according to the HTTP return packet information and the webpage source codes. The attack effectiveness can be automatically verified, the manual verification quantity is greatly reduced, responses can be made to the attacks in time, the attack verification time is saved, accuracy and reliability of attack verification are improved, and labor cost is saved.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a website attack verification method and a website attack verification device. Background technique [0002] Online sites experience tens of thousands of attacks every day. Attackers hope to obtain illegal benefits through the loopholes of the website, such as buying goods without paying, defrauding normal users to remit money, transferring money, stealing sensitive information and using reselling, etc. Most attackers scan websites with a vulnerability scanner. The vulnerability scanner will replace or change normal paths or parameters with malicious attack loads (Payload) to find website vulnerabilities. Because the attacker has no way of knowing the specific configuration of the website server, nor can he predict the vulnerability of the website, such attacks are often untargeted. And because vulnerability scanners often work concurrently, this causes the websit...

Images