Offline detection method and system for cross-site scripting vulnerability
A technology for cross-site scripting vulnerabilities and vulnerabilities, applied in software testing/debugging and other directions, it can solve the problems of uncontrollable crawling rate of crawler, reduce business logic coverage, consume a lot of time, etc., and achieve the effect of improving coverage and automation.
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0038] figure 1 It is a functional block diagram of an offline detection system for cross-site scripting vulnerabilities based on resource isolation according to an embodiment of the present invention. Such as figure 1 As shown, the system includes: an automated detection system front-end control device 110 , an automated testing environment resource isolation device 120 , a network traffic forwarding device 130 , a distributed scheduling device 140 , and a cross-site scripting vulnerability security testing device 150 .
[0039] The front-end control device 110 of the automatic detection system is used to receive the security test instruction, and obtain the IP of the function test server and the function test item HOST (virtualized website). During specific implementation, the front-end control device 110 of the automated detection system receives instructions from safety testers, and inputs the IP of the function test server, function test item HOST, and safety test item n...
Embodiment 2
[0051] Embodiments of the present invention provide an offline detection method for cross-site scripting vulnerabilities based on resource isolation, thereby automatically completing offline security testing.
[0052] figure 2 It is a flowchart of an offline detection method for cross-site scripting vulnerabilities based on resource isolation according to an embodiment of the present invention. combined reference figure 1 and figure 2 , the method includes the following processing steps:
[0053] Step 210: the front-end control device of the automatic detection system receives the safety test instruction, and obtains the IP of the functional test server and the functional test item HOST (virtualized website);
[0054] Specifically, in this step, the function tester will input the item number of the function test of the program, the HOST of the test environment and the server IP into the front-end control device of the automatic detection system.
[0055] Step 220: The au...
PUM
![No PUM](https://static-eureka.patsnap.com/ssr/23.2.0/_nuxt/noPUMSmall.5c5f49c7.png)
Abstract
Description
Claims
Application Information
![application no application](https://static-eureka.patsnap.com/ssr/23.2.0/_nuxt/application.06fe782c.png)
- R&D Engineer
- R&D Manager
- IP Professional
- Industry Leading Data Capabilities
- Powerful AI technology
- Patent DNA Extraction
Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.
© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap