Method and device for creating and querying catalog database

Abstract

The invention provides directory database generation and query methods and apparatuses. The generation method comprises the steps of obtaining a website framework of a target website and determining a crawler policy according to the website framework; obtaining source code data of the target website according to the crawler policy; determining a primary key of the source code data in a directory database according to a path of obtaining the source code data, and determining a secondary key of the source code data in the directory database according to feature parameters of the source code data; and determining a storage directory of the source code data of the target website in the directory database according to the primary key and the secondary key, and storing the source code data, thereby generating the directory database. According to the methods and the apparatuses, the generated directory database stores a large amount of data information, and a storage path of the source code data of the target website in the directory database is determined according to the primary key and the secondary key, so that a directory query can be conveniently performed, a vulnerability directory can be scanned more easily during directory scanning, and the website framework can be adjusted in time for protecting the website security.

Description

technical field [0001] The invention relates to the technical field of computer and information security, in particular to a method and device for generating and querying a directory database. Background technique [0002] The WEB website is the most widely used website on the Internet, so it is often subject to malicious attacks. Among them, the directory scanning attack is a kind of attack method with strong versatility and high harm. In a directory scanning attack, the attacker initiates a Hypertext transfer protocol (HTTP) request by iterating a large number of directories and file name lists to obtain the directory information topology of the website, thereby leaking sensitive information such as upload pages and background login pages. Once the attacker obtains this information, the security protection of the entire website system will fall short. [0003] In order to prevent the website from being attacked, it is necessary to detect the security of the website and fi...

AI Technical Summary

Problems solved by technology

[0005] In view of this, the purpose of the embodiments of the present invention is to provide a method and device for creating and querying a catalog database, so as to solve the problem that the website catalog database in the prior art stores a small amount of data and lacks classified storage, which makes it difficult to scan the website. Sexual directory, which is not conducive to the security detection of the website

Images