Method, system and device for detecting HTTP protocol asset and computer medium

Abstract

The invention discloses a method, a system and a device for detecting HTTP protocol asset and a computer medium. The method comprises the following steps: obtaining a destination IP, a destination port, destination Host domain name information and destination URL information in HTTP request; judging whether the destination Host domain name information belongs to registered domain name informationor not; judging whether the destination URL information belongs to registered URL information or not if the destination Host domain name information belongs to the registered domain name information;and recording the destination IP, the destination port, the destination Host domain name information and the destination URL information as unregistered asset information if the destination URL information does not belong to the registered URL information. According to the method for detecting HTTP protocol asset, the situation of omission of report in the method for detecting HTTP protocol assetis avoided by judging whether the destination URL information belongs to the registered URL information or not; through the system and the device for detecting HTTP protocol asset as well as the computer-readable storage medium, the corresponding technical problems are also solved.

Description

technical field [0001] The present application relates to the technical field of servers, and more specifically, relates to an HTTP protocol asset detection method, system, device and computer medium. Background technique [0002] With the development of the Internet, network security issues are becoming more and more prominent, and website security management is becoming more and more important. In the Internet environment, more and more network information interactions are realized through browser access to Web sites. Web sites are more and more used on the Internet. To ensure the security of Web sites, it is necessary to detect the security of HTTP protocol assets. [0003] Existing a kind of HTTP protocol asset detection method is: resolve the purpose IP of Web site, purpose port and Host domain name information by HTTP agreement, judge whether Host domain name information belongs to the domain name information of having put on record, if not, then record purpose IP, De...

AI Technical Summary

Problems solved by technology

[0004] However, in an existing HTTP protocol asset detection method, after the Host domain name information belongs to the registered domain name information, there may also be a situation where the Web site accesses other asset directories without authorization, thereby reducing the security of the Web site and also reducing the security of the Web site. That is, an existing HTTP protocol asset detection method may fail to report

Images