System vulnerability detection method, device, terminal equipment and medium

Abstract

The invention provides a system vulnerability detection method, a system vulnerability detection device and terminal equipment, and belongs to the technical field of signal processing. The method comprises the steps of obtaining an interception log collected by an application firewall; analyzing the interception log, and extracting attack parameters associated with the attack event in the interception log; determining a simulation object corresponding to the to-be-attacked object in the test environment according to the address information; replaying the attack parameters in the test environment, and receiving response information returned by the simulation object based on the attack parameters; and determining an attack result generated by the attack parameter to the to-be-attacked objectaccording to the response information, and identifying system vulnerability information of the to-be-attacked object based on the attack result. According to the method, the simulation operation about the historical attack event of the production environment is executed in the test environment, and the attack result of the to-be-attacked object about the attack parameter is indirectly determined,so that whether the historical attack event succeeds or not is automatically verified, and the detection efficiency and the detection accuracy of the system vulnerability are improved.

Description

technical field [0001] The invention belongs to the field of security technology, and in particular relates to a system vulnerability detection method, device, terminal equipment and computer-readable storage medium. Background technique [0002] WEB application firewall is an overall WEB security protection device integrating WEB protection, web page protection, load balancing, and application delivery. Generally speaking, the WEB application firewall will monitor all network data flowing through the WEB application firewall based on predetermined attack characteristics. If a large amount of network data matching attack characteristics is found during daily monitoring, the WEB application firewall will intercept or record the network data. Since the WEB application firewall only has the above data interception and recording functions, it cannot automatically determine whether the currently intercepted network data will affect the business system, and whether the system sti...

AI Technical Summary

Problems solved by technology

[0004] In view of this, the embodiments of the present invention provide a system vulnerability detection method, device, terminal equipment, and computer-readable storage medium to solve the problem of relatively low detection efficiency and detection accuracy of existing WEB system vulnerabilities

Images