Unauthorized vulnerability detection method and device, equipment and computer program product

Abstract

The invention relates to the technical field of finance science and technology, and discloses an unauthorized vulnerability detection method and device, equipment and product, and the method comprises the steps: receiving a first service request comprising a first identity label of a to-be-detected system, and modifying the first identity label to obtain a second service request; executing the first service request and the second service request to obtain response data; fragmenting each piece of response data, and performing hash on each piece of fragmented data to obtain a first fragmented hash value and a second fragmented hash value; splicing the first fragment hash values to obtain a first spliced hash value, and splicing the second fragment hash values to obtain a second spliced hash value; and determining whether the to-be-detected system has an unauthorized vulnerability or not according to the similarity of the two spliced hash values. According to the method, the response data is fragmented, and the similarity comparison is performed according to the hash value of the obtained fragmented data, so the efficiency of the unauthorized vulnerability detection is improved on the premise of ensuring the accuracy of the unauthorized vulnerability detection.

Description

technical field [0001] The present invention relates to the technical field of financial science and technology (Fintech), and in particular to a detection method, device system, equipment and computer program product for unauthorized loopholes. Background technique [0002] With the development of computer technology, more and more technologies (big data, distributed, blockchain, artificial intelligence, etc.) The industry's security and real-time requirements also put forward higher requirements for unauthorized vulnerability detection technology. [0003] With the recent outbreak of various high-risk vulnerabilities, network security issues have attracted more and more attention. Privilege violation vulnerability, a common security vulnerability in web applications, means that due to the negligence of programmers, there is no strict restriction on the permissions / users required for an operation, so that users who should not have operation permissions can operate normally...

AI Technical Summary

Problems solved by technology

[0005] The main purpose of the present invention is to propose a method, device, equipment and computer program product for detecting unauthorized vulnerabilities, aiming at solving the low efficiency of existing unauthorized vulnerability detection technical issues

Images