Deserialization vulnerability detection method and device

Abstract

The invention provides a deserialization vulnerability detection method and device, and relates to the technical field of information safety. The method comprises the following steps: receiving a deserialized vulnerability detection request sent by a vulnerability detection terminal; if it is judged that the application program corresponding to the application identifier and the version number isnot detected, preprocessing the program data to obtain directed graph data corresponding to the program data; uploading the directed graph data corresponding to the program data to a vulnerability detection cloud, so that the vulnerability detection cloud obtains a deserialized vulnerability detection strategy based on the directed graph data corresponding to the program data and the deserializedvulnerability model; receiving a deserialized vulnerability detection strategy issued by the vulnerability detection cloud, and generating a detection script; running the detection script to obtain adetection result; and returning a detection result to the vulnerability detection terminal. The device is used for executing the method. According to the deserialization vulnerability detection methodand device provided by the embodiment of the invention, the detection efficiency of the deserialization vulnerability is improved.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a deserialization vulnerability detection method and device. Background technique [0002] With the development of high-level language and the maturity of development technology, many enterprises develop diversified applications based on the JAVA programming language or the framework implemented by this language. In the application development process, serialization and deserialization technologies are widely used in order to solve the problem of data persistence and object transfer between processes. [0003] At present, with the widespread use of serialization and deserialization technology, criminals have maliciously used the loopholes of deserialization technology to perform malicious acts, steal user data, and damage computer systems in recent years. Therefore, how to detect deserialization vulnerabilities and improve security is a problem that every enterprise...

AI Technical Summary

Problems solved by technology

In the prior art, the deserialization vulnerability detection method has the following three deficiencies: First, the detection method mainly uses the existing discovered call chain to perform verification on all related applications involved in sequence. Once many applications are involved, execute Verification will inevitably consume a large amount of computing resources, resulting in lower detection efficiency; second, most of the existing methods and tools for detecting deserialization vulnerabilities are aimed at a certain type of application framework, which is not universal and cannot be applied to other application frameworks; 3. Most of the existing methods for detecting deserialization vulnerabilities are manually detected using published call chains, and active learning and detection cannot be performed

Images