File detection method and file detection device
A detection method and detection device technology, which are applied in the field of information security, can solve the problem of high false alarm rate, and achieve the effects of improving security performance, improving accuracy and detection performance.
Active Publication Date: 2020-08-14
TENCENT TECH (SHENZHEN) CO LTD
View PDF4 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
This detection method only uses the HTTP status code as the basis for judging whether the file exists, and the false positive rate is high.
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0025] In order to make the objectives, technical solutions and advantages of the present invention clearer, the present invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention, and do not limit the protection scope of the present invention.
[0026] figure 1 A schematic diagram of the working environment in an embodiment of the present invention is shown, such as figure 1 As shown, its working environment involves a terminal 101 and a server 102, and the terminal 101 and the server 102 can communicate through a network. The terminal 101 can detect and obtain information of sensitive files and sensitive directories from other servers 102 through the network. Servers 102, such as security servers and vulnerability scanning servers, can also detect and obtain information of sensitive files and sensitive di...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
A file detection method and device. The method in one embodiment includes: sending a first access request to a target site to access a file / directory that does not exist; receiving a first access response returned by the target site according to the first access request; The response page is adapted to determine the 404 page model of the target site; the sensitive file directory path of the target site is obtained and loaded from the file directory dictionary; according to the loaded sensitive file directory path, a second access request is sent to the target site, and the second access The request includes a sensitive file directory path; receiving the second access response returned by the target site according to the request; matching the second access response with the 404 page model of the target site, and judging whether the sensitive file directory path exists in the target site according to the matching result. The solution of this embodiment improves the detection accuracy and detection performance for sensitive files and sensitive directories, and thus improves security performance.
Description
technical field [0001] The invention relates to the technical field of information security, in particular to a file detection method and a file detection device. Background technique [0002] Sensitive files refer to files containing sensitive information, such as server configuration, server password, website source code, etc. Sensitive directories refer to directories where sensitive files may exist. If the sensitive information of sensitive directories and sensitive files is obtained by hackers It will affect the security of the website. Therefore, by detecting sensitive files, and then taking certain security measures to avoid the leakage of sensitive information in sensitive files, it has become a content in the field of network information security. In the current detection technology for sensitive files, the path of the sensitive file is usually obtained by loading a dictionary, and then a large number of requests are sent to the target website based on the path of ...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Patents(China)
IPC IPC(8): H04L29/06H04L29/08
CPCH04L63/10G06F21/577G06F21/6218H04L67/60
Inventor 唐文韬胡珀郑兴王放郭晶张强范宇河杨勇
Owner TENCENT TECH (SHENZHEN) CO LTD