Vulnerability detection method and system

Abstract

The invention provides a vulnerability detection method and system, and the method comprises the steps: responding to a vulnerability detection request, and determining a to-be-detected object; determining a target vulnerability rule list at least based on the to-be-detected object and the performance score value of each vulnerability rule in a rule base, wherein a plurality of target vulnerability rules are recorded in the target vulnerability rule list; performing vulnerability scanning on the to-be-detected object based on the target vulnerability list; generating feedback information at least based on the scanning result; and updating a performance score value of the target vulnerability rule based on the feedback information. According to the vulnerability detection method, the optimal vulnerability rule can be automatically determined and updated, so that the success rate and speed of each vulnerability detection are ensured.

Description

technical field [0001] The embodiments of the present application relate to the technical field of network security, and in particular to a vulnerability detection method and system. Background technique [0002] Under the environment of rapid development of the Internet, various web (network) applications emerge in an endless stream. These web applications have gradually changed people's daily behavior habits and business processing methods, making the complex and tedious solutions in the past simple and efficient. [0003] But along with it, the network security environment is becoming increasingly severe, and malicious attacks against web applications also occur from time to time. Once a web application in a production environment exposes security problems, it will cause serious damage to users and enterprises using it. The impact is likely to be immeasurable. [0004] Therefore, more and more people turn their attention to web security, hoping that all web applications ...

AI Technical Summary

Problems solved by technology

[0007] Both the classification work and the level update work need to be carried out actively by maintenance personnel, and the test environment needs to be updated to reduce the difference between the test environment and the real environment, resulting in low overall efficiency;

[0008] Since the level update is performed regularly and the update interval is long, it cannot meet the ever-changing needs of the current computer technology. Therefore, the detection efficiency of the vulnerability rule base is often significantly reduced during the update cycle, resulting in too long time for each detection and a lot of waste. system resources;

[0009] The update of the vulnerability rules cannot take into account the full performance of the vulnerability rules, which not only does not shorten the detection time after injecting the vulnerability rules in some application scenarios, but also affects the normal operation of the detection object

Images