Website security detection method and device

Abstract

The invention provides a website security detection method and a website security detection device. The method comprises the following steps: acquiring a server Internet Protocol IP address list of a website, wherein each server has an IP address, and the IP addresses of different servers are different; and performing security detection of the website based on the server IP address list. By using the website security detection method in the embodiment of the invention, security detection of websites can be performed more efficiently and reasonably, and the efficiency of website security detection can be improved.

Description

technical field [0001] The invention relates to the field of website security detection, in particular to a method and device for website security detection. Background technique [0002] With the development of network technology, people's dependence on the network is also increasing. This dependence is not only reflected in the fact that people need to obtain or share or transmit information through the Internet in their daily study and work, but also in the fact that people conduct economic and financial operations through the Internet, such as online shopping or online remittance. With the increase of this dependence, especially people rely on the network for information transmission and financial operations, it directly leads to the increasing attention of network security. [0003] At present, many large websites use multiple servers to jointly perform load balancing operations. In this case, if the systems or applications or codes in each server are not synchronized,...

AI Technical Summary

Problems solved by technology

[0003] At present, many large websites use multiple servers to jointly perform load balancing operations. In this case, if the systems or applications or codes in each server are not synchronized, it may cause serious security problems.

For example, there is a serious security vulnerability in the website xxx.20m.cn. This website has 10 mirror servers. After the developer fixes the security vulnerability, he needs to update all 10 servers. If there is a server that has not been updated, the code of this server is not synchronized with other servers, that is, the security hole of this server still exists, which may cause serious network security problems, and the update between servers takes a long time time, so for a long time not all web servers were updated even though developers fixed security holes

[0004] In the prior art, security detection is performed on servers based on the domain name. When a domain name corresponds to multiple servers, the security detection operation of the prior art cannot specifically detect which server has an out-of-sync problem. Therefore, the security detection of the prior art The detection operation cannot fully detect the website, and there is a problem that it is difficult to find the server with security problems

Images