Acquisition and audit analysis method and device for safety test data

Abstract

The invention discloses an acquisition and audit analysis method and device for safety test data, relates to the technical field of the internet, and improves safety of a process of carrying out a safety test on an information system of an enterprise. The method disclosed by the invention comprises the steps of: receiving a safety test request sent by terminal equipment, wherein the safety test request comprises identity information corresponding to the terminal equipment; according to the identity information, determining a virtual network card corresponding to the terminal equipment; by monitoring the virtual network card, acquiring safety test traffic corresponding to the terminal equipment; and carrying out audit analysis processing on the safety test traffic to acquire safety test data corresponding to the terminal equipment, wherein the safety test data is used for quantizing the safety test process corresponding to the terminal equipment and auditing a high-risk behavior operation corresponding to the terminal equipment. The acquisition and audit analysis method and device are applicable to the process that a third-party tester carries out the safety test on the informationsystem of the enterprise.

Description

Technical field [0001] The invention relates to the field of Internet technology, and in particular to a method and device for acquiring and auditing and analyzing safety test data. Background technique [0002] With the increasing development of Internet technology, information technology has become an important means for major enterprises to carry out business innovation and layout business strategies, and the business development of enterprises is increasingly dependent on information technology. However, in the process of business operations of an enterprise, factors such as technical loopholes or management deficiencies will cause the enterprise’s business to be harmed by information technology risks. Because information technology risks have the characteristics of wide coverage, high destructive power, and strong concealment, the information Technological risks can cause enterprise business to be paralyzed in an instant, so how to ensure that enterprise business avoids the ...

AI Technical Summary

Problems solved by technology

[0004] In the process of implementing the present invention, the inventor found the following technical problems in the prior art, because after the third-party testers conduct security tests on the enterprise's information system, they will only provide the test results of the security test to the enterprise, although According to the security test results, the enterprise can improve the potential threat points in the information system to ensure that the enterprise business is not harmed by information technology risks in the process of operation, but the enterprise cannot know that the third-party testers are in the security The specific testing behavior during the testing process, so that it is impossible to know whether the third-party testers have performed illegal operations such as obtaining sensitive data of the enterprise and retaining backdoors in the information system during the security testing process, which in turn leads to the failure of the security testing process of the information system of the enterprise. less secure

Images