WEB vulnerability scanning method in support of dynamic expansion and scanner

Abstract

The invention relates to the technical field of network information security, and specifically relates to a WEB vulnerability scanning method in support of dynamic expansion. The method includes following steps: S101: vulnerability scanning initialization; S102: vulnerability scanning task response; S103: vulnerability information loading; S104: vulnerability information connection; and S105: vulnerability scanning result return. By employing the method and structure, each scanning only aims at one vulnerability so that the scanning accuracy is improved and the frequency of ineffective scanning is reduced; besides, the multi-thread concurrency technology is adopted so that multiple targets and multiple vulnerabilities can be simultaneously scanned, and the scanning efficiency is improved.

Description

technical field [0001] The invention relates to the technical field of network information security, in particular to a WEB vulnerability scanning method and a scanner supporting dynamic expansion. Background technique [0002] WEB vulnerabilities usually refer to loopholes in website programs, which may be caused by code writers who did not consider well when writing code. Common WEB vulnerabilities include Sql injection, Xss vulnerabilities, and upload vulnerabilities. [0003] With the continuous development of the Internet, as early as 2014, the number of websites in the world has exceeded 1 billion, and as of December 2015, the total number of websites in China alone has reached 4.23 million. Correspondingly, website security issues are becoming more and more serious. Incidents such as the global Openssl Heartbleed vulnerability and user data leakage of multiple domestic websites have made website security issues more and more people's attention. [0004] General WEB v...

AI Technical Summary

Problems solved by technology

[0004] Common WEB vulnerability scanners may have the following problems: only one target can be tested for vulnerabilities at a time, and the scanning efficiency is low; all vulnerabilities can be detected for one target at the same time, the scanning speed is slow, and there are many invalid scans; the vulnerability library is integrated in In the scanner, once the vulnerability database information needs to be added, the scanner needs to be restarted, updated or even reinstalled to achieve this, and the system has poor scalability

Although this invention maximizes the use of bandwidth and other resources, it does not cause too much impact on the load of the scanned site; but this invention does not address dynamic expansion

Images