A Vulnerability Detection Method and System Based on Fuzzy Technology

Abstract

This disclosure proposes a fuzzy technology-based vulnerability detection method and system, including the following steps: establishing a fuzzy target decision tree model, using the fuzzy target decision tree model to formulate a target identification scanning strategy; determining the communication port number and target The host communicates, obtains the information of the target host, and determines the detection target; according to the target host information, uses the fuzzy algorithm to scan the detection target for vulnerabilities, and judges whether there are loopholes. Through the decision tree, the target identification scanning strategy for finding and identifying the target host can be obtained, and the approximate range of the target host information and the open port number can be output to determine the target host. According to the target host information returned by the target host, the fuzzy algorithm is used to generate the vulnerability test The test case or test data package can be used for vulnerability testing. Users can perform vulnerability scanning without professional knowledge, realizing the automation and intelligence of vulnerability scanning.

Description

technical field [0001] The present disclosure relates to the relevant technical field of network vulnerability detection, and specifically relates to a method and system for detecting a vulnerability based on fuzzy technology. Background technique [0002] The statements in this section merely provide background information related to the present disclosure and may not necessarily constitute prior art. [0003] With the rapid development of the Internet, the situation of network information security is becoming more and more serious, and various forms of attacks and stealing behaviors emerge in an endless stream, which pose a serious threat not only to personal information and property, but also to national defense construction and various fields of the national economy. In recent years, a large number of security incidents have been exposed. Therefore, automatic, fast and effective vulnerability mining has become an important research direction in the information security i...

AI Technical Summary

Problems solved by technology

The detection method in the payload library is aimed at a single vulnerability, and the accuracy of detecting vulnerabilities is low.

There are more and more types of network information system equipment, and the types of applications are becoming more and more diverse. The traditional network space detection target branch will be more and more, and the operation will be more complicated.

Images