Safety test data acquisition and audit analysis method and device

Abstract

The invention discloses a safety test data acquisition and audit analysis method and device, relates to the technical field of the Internet, and improves the safety of the safety test process of an enterprise's information system. The method of the present invention includes: receiving a security test request sent by a terminal device, wherein the security test request includes the identity information corresponding to the terminal device; determining the virtual network card corresponding to the terminal device according to the identity information; The virtual network card obtains the security test traffic corresponding to the terminal device; audits and analyzes the security test traffic to obtain security test data corresponding to the terminal device, and the security test data is used to quantify the terminal device The corresponding security testing process and the auditing of high-risk behavior operations corresponding to the terminal equipment. The invention is applicable to the process of third-party testers conducting security tests on enterprise information systems.

Description

technical field [0001] The invention relates to the technical field of the Internet, in particular to a method and device for acquiring and auditing analysis of safety test data. Background technique [0002] With the increasing development of Internet technology, information technology has become an important means for major enterprises to carry out business innovation and layout business strategy, and the business development of enterprises is increasingly dependent on information technology. However, in the process of enterprise business operation, factors such as technical loopholes or management defects will cause enterprise business to be harmed by information technology risks. Because information technology risks have the characteristics of wide coverage, high destructive power, and strong concealment, information Technological risks can paralyze the business of an enterprise in an instant, so how to ensure that the business of the enterprise is not harmed by informat...

AI Technical Summary

Problems solved by technology

[0004] In the process of implementing the present invention, the inventor found the following technical problems in the prior art, because after the third-party testers conduct security tests on the enterprise's information system, they will only provide the test results of the security test to the enterprise, although According to the security test results, the enterprise can improve the potential threat points in the information system to ensure that the enterprise business is not harmed by information technology risks in the process of operation, but the enterprise cannot know that the third-party testers are in the security The specific testing behavior during the testing process, so that it is impossible to know whether the third-party testers have performed illegal operations such as obtaining sensitive data of the enterprise and retaining backdoors in the information system during the security testing process, which in turn leads to the failure of the security testing process of the information system of the enterprise. less secure

Images