Method for reducing false alarm of vulnerability scanning

Abstract

The invention relates to a method for reducing the false alarm of vulnerability scanning. The method comprises the following steps of: obtaining false alarm information and corresponding data by scanning a system terminal, submitting the false alarm information and the corresponding data to a shared server for manual auditing and affirmation, adjusting technical parameters, providing and synchronizing a correction scheme, and finally processing or repairing by the terminal based on the correction scheme. According to the invention, vulnerability types with high false alarm rate can be marked in a unified manner; determining a false alarm point, refining the collected false alarm items, then performing content analysis processing and refining in a unified manner, performing professional analysis on the collected false alarm content by a technician, performing misjudgment and corresponding correction, and performing correction processing on a database and a vulnerability library; data centralized processing and updating optimization processing are adopted to solve false alarm, the detection efficiency is improved, effective false alarm related data can be collected, the subsequent workload is reduced, qualitative improvement is brought to vulnerability scanning accuracy, the false alarm rate is reduced, and repeated work is greatly reduced.

Description

technical field

[0001] The invention relates to the transmission of digital information, such as the technical field of telegram communication, and in particular to a method for reducing false positives in vulnerability scanning. Background technique

[0002] Due to the uneven level and experience of developers, a considerable number of developers did not make necessary legal judgments on the user's input data or information carried in the page, such as cookies, when writing code, which led to the Vulnerabilities can be used to invade databases or attack users of web applications, thereby obtaining some important data and benefits.

[0003] With the increase of the number of websites, there are more and more tasks to detect webpage vulnerabilities. In the process of vulnerability scanning, there are inevitably false positives. Trouble; in the existing technology, it is generally processed directly through manual methods, deleting false positive content, or avoiding the know...

Images