Jar package security monitoring method, device, computer equipment and storage medium

Abstract

The invention discloses a Jar package security monitoring method, device, computer equipment and storage medium. The method includes: executing the Jar package monitoring event, monitoring the project in the Jar package warehouse of the monitoring system and relying on the current state data corresponding to the Jar package, and judging whether the current state data meets the security monitoring conditions; if the security monitoring conditions are met, executing the in-warehouse verification process , check the security level of the project-dependent Jar package in the warehouse, and obtain the current security level corresponding to the project-dependent Jar package; query the system database based on the project-dependent Jar package to obtain the initial security level and Jar package development information corresponding to the project-dependent Jar package; If the current security level of the project-dependent Jar package is lower than the initial security level, a retrospective reminder message is generated and sent to the development terminal corresponding to the Jar package development information. The method can ensure the processing efficiency of the security level verification, timely remind to update the Java project project whose application said project depends on the Jar package, and ensure the safety and reliability of the Java project project.

Description

technical field [0001] The present invention relates to the field of information security, in particular to a Jar package security monitoring method, device, computer equipment and storage medium. Background technique [0002] At present, a large number of enterprises use Java compilation tools for product development. In the process of using Java compilation tools for product development, they will inevitably use the Jar package released by the company's internal team or third-party companies. If the product development process refers to the end of the life cycle The version of the Jar package, the Jar package whose life cycle is nearing the end, or the Jar package that has been illegally tampered with, the Jar package that contains fatal flaws or vulnerabilities, or the Jar packages referenced by multiple teams is different, resulting in the development of the Java project project cannot be guaranteed. In the current Java project engineering development and application pro...

AI Technical Summary

Problems solved by technology

[0003] The embodiment of the present invention provides a Jar package security monitoring method, device, computer equipment and storage medium to solve the problem in the prior art that projects with high risks cannot be eliminated in time and rely on Jar packages.

Images