Automatic vulnerability detection system and method based on port identification

Abstract

The invention discloses an automatic vulnerability detection system based on port identification, includes a port quick scan module, a port protocol identification module, an asset classification storage module, a vulnerability verification module, an asset visualization display module, fast-scans that asset IP segment through the port fast-scan module, and outputs the result to the port protocolidentification module for fine service version fingerprint identification, classifies and stories the result after identification according to IP, port, service version in an asset classification storage module, and adds the filtered specific digital assets to the vulnerability validation module to begin vulnerability validation, at last, the t results are output and deliver to the operation and maintenance personnel for repair. The automatic vulnerability detection system and the automatic vulnerability detection method based on the port identification of the invention can complete the safetydetection of the enterprise assets within one hour of the vulnerability outbreak, greatly reduce the emergency response time and the human cost, and ensure that the enterprise completes the vulnerability discovery and repair before being attacked to the maximum extent.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to an automatic loophole detection system and method based on port identification. Background technique [0002] With the rapid development of the Internet economy and the rapid popularization of e-commerce, computers are involved in various links such as payment and logistics. With the outbreak of a large number of security problems, new methods are needed to quickly discover and repair a large number of loopholes. [0003] In the long-term vulnerability mining process, we often start from the system, business, or application, and IP address, and traverse each parameter of an application by submitting a large number of attack payloads to determine whether a vulnerability exists. This security detection This method is feasible for daily detection, but once a new high-risk vulnerability breaks out, this method will greatly reduce the efficiency of security detection and do a...

AI Technical Summary

Problems solved by technology

[0006] a. Crawl through URL links to capture all URLs of an application. In this scanning method, crawling URLs and adding attack loads to each URL will consume a lot of time, which will seriously affect the verification efficiency of new vulnerabilities;

[0007] b. In multiple vulnerability scanning software and platform evaluations, there is a lack of asset discovery functions, which is time-consuming and laborious, requiring manual addition of enterprise assets to the list to be scanned;

[0008] c. Most of them use the combination of man and machine, which cannot complete the detection tasks of massive assets in a short period of time, which may lead to the vulnerability being exploited before it is discovered.