Vulnerability detection method and system based on fuzzy technology

Abstract

The invention provides a vulnerability detection method and system based on a fuzzy technology, and the method comprises the following steps: building a fuzzy target decision tree model, and employingthe fuzzy target decision tree model to formulate a target recognition scanning strategy; determining a communication port number to communicate with a target host according to the target identification scanning strategy, obtaining information of the target host, and determining a detection target; and performing vulnerability scanning on the detection target by adopting a fuzzy algorithm according to the target host information, and judging whether vulnerability exists or not. A target identification scanning strategy for searching and identifying a target host can be obtained through the decision tree; outputting an approximate range of the target host information and an open port number; therefore, the target host is determined, the test case or the test data packet for vulnerability testing is generated by adopting the fuzzy algorithm according to the target host information returned by the target host, vulnerability testing is carried out, a user can carry out vulnerability scanning without professional knowledge, and automation and intelligence of vulnerability scanning are realized.

Description

technical field [0001] The present disclosure relates to the relevant technical field of network vulnerability detection, and specifically relates to a method and system for detecting a vulnerability based on fuzzy technology. Background technique [0002] The statements in this section merely provide background information related to the present disclosure and may not necessarily constitute prior art. [0003] With the rapid development of the Internet, the situation of network information security is becoming more and more serious, and various forms of attacks and stealing behaviors emerge in an endless stream, which pose a serious threat not only to personal information and property, but also to national defense construction and various fields of the national economy. In recent years, a large number of security incidents have been exposed. Therefore, automatic, fast and effective vulnerability mining has become an important research direction in the information security i...

AI Technical Summary

Problems solved by technology

The detection method in the payload library is aimed at a single vulnerability, and the accuracy of detecting vulnerabilities is low.

There are more and more types of network information system equipment, and the types of applications are becoming more and more diverse. The traditional network space detection target branch will be more and more, and the operation will be more complicated.

Images