Website monitoring system and method applicable to power industry

Abstract

The invention discloses a website monitoring system and method applicable to a power industry. The system comprises an interaction layer, a data layer, a scheduling layer and a detection engine. The scheduling layer is used for scheduling the detection engine to carry out periodic automatic detection on tasks issued by users and summarizing detection results to the data layer after the detection is finished. The detection engine is used for receiving detection commands issued by the scheduling layer, detecting target websites, identifying Web security vulnerabilities, carrying out deep security physical examination on the website, monitoring website operation security states in real time, identifying the condition that a webpage is illegally tampered, malicious code is embedded into the webpage, a domain name is hijacked, an access page is refused and sensitive information occurs in the webpage, collecting internal security information on site by employing a vulnerability scanning device and a vulnerability detection tool, checking hidden vulnerabilities and deep security events, collecting website security physical examination results, website operation security state and onsite security checking results and transmitting the data to a database for storage.

Description

technical field [0001] The invention relates to a website monitoring system and method adapted to the electric power industry. Background technique [0002] There are the following problems in the prior art: [0003] 1. Under the current circumstances, the power system is an important part of my country's energy industry, and its informatization has reached a certain scale. One of the key points of informatization construction is information security; information security has become an important part of the informatization work of power grid companies. Information security work is the foundation and guarantee of enterprise informatization construction, and is directly related to enterprise security and development. [0004] 2. Trojans on web pages, SQL injection attacks and XSS cross-site attacks have become one of the main ways for Trojan horses and viruses to spread. Due to the existence of various system vulnerabilities and software vulnerabilities, the number of intrusi...

AI Technical Summary

Problems solved by technology

A series of data shows that the traditional web security protection and monitoring has been difficult to cope with the current situation, and the normalized monitoring, early warning and situation analysis of web security have become the top priority of web security

[0006] 4. In the face of large-scale website security monitoring work, it is almost unimaginable to still rely on traditional stand-alone security detection tools or administrators to manually detect and manage websites, which not only consumes a lot of manpower and material resources, but also has low effectiveness and comprehensiveness of detection

Although it is possible to achieve a certain defensive effect by deploying intrusion prevention systems, high-performance firewalls and other related defense products, it is difficult for users to discover hidden risks in a timely manner and prevent these security incidents

In addition, administrators need to maintain a large number of security devices and analyze a large number of log information. The additional workload brought by these cannot be underestimated

In the current situation where webpage tampering, webpage hanging horse and SQL injection attacks are becoming more and more serious, we will face great challenges

Images