Secure static detection method and device for containerized deployment application

Abstract

The invention discloses a security static detection method and device for containerized deployment application. The method comprises the following steps: acquiring a preset security detection rule; and according to the security detection rule, adopting a static code scanning method to detect environment configuration of a first container and configuration information of an application deployed ina second container, wherein a logic code of the application is deployed in the first container. The logic code of the application is deployed in the first container, the configuration file of the application is deployed in the second container, strong binding of the configuration file and the logic code is decoupled, uniformity and standardization of security detection are achieved, flexible adjustment of the logic code and container resources of the application is better supported. According to the invention, security detection after modification can be carried out on the configuration file involved in the containerized deployment application, and related security risks of the running application due to adjustment of related configurations can be avoided.

Description

Technical field [0001] The present invention relates to the field of safety testing, and in particular, there is a safety static detection method and apparatus for container deployment applications. Background technique [0002] Currently applied safety detection methods for commonly used static code scans. Static code scan focuses on the detection of the risk contents such as language specification, cryptographic text, SQL variables in the application logic code. At present, the static code scanning method is mainly detected by the application's profile before applying the deployment. The application logic code will not be checked again when the application logic code is deployed. It can be seen that the existing method cannot detect security risks in the application run due to the adjustment of the configuration file. Inventive content [0003] In order to solve at least one of the above-described background techniques, a safe static detection method and apparatus for containe...

AI Technical Summary

Problems solved by technology

It can be seen that the existing methods cannot detect the related security risks caused by the adjustment of the configuration file during the operation of the application

Images