Intranet-oriented novel vulnerability attack detection system

Abstract

The invention discloses an intranet-oriented novel vulnerability attack detection system. The novel vulnerability attack detection system comprises an information collection module, a vulnerability detection module and a vulnerability analysis module, the information collection module uses a crawler technology to pull vulnerability-related information based on PoC from the Internet, performs format preprocessing and recombination on the information, and finally stores the information in a database; the vulnerability detection module is used for executing vulnerability detection on the target host with priority by using the collected PoC resources to generate a detection result report; and the vulnerability analysis module performs vulnerability information synthesis and vulnerability attack signature extraction, screens the most efficient signature to combine into an IDS rule, and deploys the detection rule to a host to realize active defense. According to the invention, an automatic network vulnerability attack data collection, detection and protection integrated system is designed, the manual demand for processing network attacks is significantly reduced, rapid, timely and accurate network vulnerability attack detection can be achieved, and an effective defense means is provided at the same time.

Description

technical field [0001] The invention relates to the technical field of system loophole detection and defense, in particular to a novel loophole attack detection system and method for intranets. Background technique [0002] With the rapid development of the Internet scale, a large number of companies, teams or individuals deploy network services on servers. In particular, the development of cloud services makes the distribution of network resources faster and more convenient. Even if individual users are not proficient in computer network application technology, they can quickly and easily build personal network services. By definition, a web service (Web service) refers to a software system that is connected to each other by means of a network and realizes a specific service through the interaction of different machines on the network. In real life, the most common form is to implement user requests through remote servers. At present, the scale of various forms of network...

AI Technical Summary

Problems solved by technology

[0006] In view of the above-mentioned defects of the prior art, the technical problem to be solved by the present invention is how to reduce the low efficiency and high error caused by manual operation during vulnerability attack detection and processing, and realize the integration of network vulnerability attack information collection, detection and protection

Images