Detection parameter generation method and device, electronic equipment and storage medium

Abstract

The invention discloses a detection parameter generation method and device, electronic equipment and a computer readable storage medium. The method comprises the steps of obtaining static response data corresponding to multiple static uploading requests respectively; classifying the static response data according to data types to obtain a plurality of groups of to-be-processed data; performing parameter extraction based on the data type by utilizing each group of to-be-processed data to obtain a plurality of uploading success detection parameters; according to the method, classifying static response data according to data types to obtain a plurality of groups of to-be-processed data with different data types; in each group of to-be-processed data, performing parameter extraction according to the information representation mode of the data type to obtain the upload success detection parameter corresponding to the to-be-processed data, namely, the accurate upload success detection parameter is obtained, so that whether the dynamic script is successfully uploaded or not is accurately detected, and the user can accurately judge whether the user suffers from the network attack.

Description

technical field [0001] The present application relates to the technical field of network security, and in particular to a method for generating detection parameters, a device for generating detection parameters, electronic equipment, and a computer-readable storage medium. Background technique [0002] Webshell refers to a form of network attack that uses website ports to intrude on network servers. After invading a website, the attacker places some dynamic scripts in the website server through the file upload interface, and mixes them with normal webpage files. Using these scripts, attackers can take control of the web server. In order to detect webshell uploads, related technologies usually detect files intended to be uploaded through a file upload interface, and report to the police when it is determined that they are dynamic files. However, since the file upload interface is designed to upload static files, dynamic files intended to be uploaded through the file upload ...

AI Technical Summary

Problems solved by technology

However, since the file upload interface is designed to upload static files, dynamic files that you want to upload through the file upload interface may not be successfully uploaded, and thus cannot be used for network attacks

Therefore, the method of alerting the relevant technology when it detects that a dynamic file is to be uploaded is not conducive to the user's accurate judgment of whether it has suffered a network attack.

Images