A Method to Reduce False Positives in Vulnerability Scanning

Abstract

The invention relates to a method for reducing false alarms in vulnerability scanning. By scanning the system terminal, false alarm information and corresponding data are obtained, submitted to a shared server for manual review and identification, technical parameter adjustments, and synchronous correction schemes are provided. Finally, the terminal is based on Amendments are processed or repaired. The present invention can uniformly mark some types of vulnerabilities with a high false positive rate, clarify false positive points, refine the collected false positive entries, and then perform content analysis and refinement in a unified manner. The content of the report is professionally analyzed, whether it is misjudged and the corresponding correction is made, and the database and the vulnerability database are corrected; the present invention uses centralized data processing and update optimization processing to solve false positives, which not only improves the detection efficiency, but also collects effective Misreporting relevant data reduces follow-up workload, improves the accuracy of vulnerability scanning, reduces false positive rate, and greatly reduces duplication of work.

Description

technical field [0001] The invention relates to the transmission of digital information, such as the technical field of telegram communication, and in particular to a method for reducing false positives in vulnerability scanning. Background technique [0002] Due to the uneven level and experience of developers, a considerable number of developers did not make necessary legal judgments on the user's input data or information carried in the page, such as cookies, when writing code, which led to the Vulnerabilities can be used to invade databases or attack users of web applications, thereby obtaining some important data and benefits. [0003] With the increase of the number of websites, there are more and more tasks to detect webpage vulnerabilities. In the process of vulnerability scanning, there are inevitably false positives. Trouble; in the existing technology, it is generally processed directly through manual methods, deleting false positive content, or avoiding the know...

AI Technical Summary

Problems solved by technology

[0004] The present invention solves the problem that in the prior art, it is necessary to rely on manual review to check the false positives one by one, and the probability of later occurrence cannot be ruled out. Relying on simple false negatives to submit is prone to more delays, which increases the workload of the technical team and generates a large number of Repetitive work, in the case of network isolation, false positive information cannot be directly shared, and the update cannot be completed in the first time, providing an optimized method to reduce false positives in vulnerability scanning

Images