Attack success detection method and system of injection attack and related device

Abstract

The invention provides an attack success detection method for an injection attack. The method comprises the following steps: collecting a data packet suspected to be successfully attacked; and calling an attack success detection engine to carry out content detection and / or time detection on the data packet, and judging whether the injection attack is successful or not according to a detection result. According to the application, content detection and / or time detection are / is carried out on the injection attack by calling the attack success detection engine so as to confirm the communication data corresponding to the injection attack, so that the injection behavior when the attack is successful is detected, the injection attack which is not actually successfully attacked can be checked, and the checking and maintenance cost is reduced. Meanwhile, an injection attack detection engine can be optimized according to a result of whether the injection attack is successful or not, so that invalid alarms caused by injection attack detection false alarms are avoided. The invention further provides an attack success detection system for the injection attack, a computer readable storage medium and electronic equipment, which have the above beneficial effects.

Description

technical field [0001] The present application relates to the field of network security, and in particular to a successful attack detection method for an injection attack, a successful attack detection system, a computer-readable storage medium and electronic equipment. Background technique [0002] At present, the detection engine for injection attacks mainly uses syntax analysis and injection attack SQL feature extraction to detect injection attacks to determine whether injection attacks are included. However, the accuracy of the feature extraction of the detection engine in the current technology has more or less false positives, and not all injection attacks will succeed, that is, some injection attacks are not successful, there is no threat to the user but a large number of alarm messages will also be generated , resulting in expensive troubleshooting and maintenance costs, and even alarm fatigue, which is not conducive to the alarm and processing of subsequent injectio...

AI Technical Summary

Problems solved by technology

However, the accuracy of the feature extraction of the detection engine in the current technology has more or less false positives, and not all injection attacks will succeed, that is, some injection attacks are not successful, there is no threat to the user but a large number of alarm messages will also be generated , resulting in expensive troubleshooting and maintenance costs, and even alarm fatigue, which is not conducive to the alarm and processing of subsequent injection attacks

Images