Mimicry intrusion-based vulnerability detection method and system and storage medium thereof

Abstract

The invention discloses a mimicry intrusion-based vulnerability detection method and a system and a storage medium thereof. The method comprises the following steps of obtaining a target type of a detected target; loading a corresponding vulnerability detection script based on the target type; obtaining test request information of each vulnerability based on the vulnerability detection script, and performing verification in the detected target according to the test request information to obtain a response result of the corresponding vulnerability; comparing the response result with preset response information, and if the response result is matched with the response information, determining that the vulnerability exists; and based on the determined multiple vulnerabilities, outputting vulnerability types and affected conditions faced by the detected target. According to the target type of the detected target, the vulnerability detection script needing to be tested is determined, so that the obtained test request information is reduced; in addition, in different detected targets, the response results corresponding to the test request information are different, the vulnerability judgment precision can be improved, and normal operation of the detected targets is facilitated.

Description

technical field [0001] The present application relates to the technical field of electronic communication, in particular to a method, system and storage medium for detecting vulnerabilities based on mimicry intrusion. Background technique [0002] With the rapid development of the Internet, the diversified development of computer applications, such as e-mail, online banking, instant messaging and other applications are widely used in all aspects of user life and work, network data security leaks emerge in endlessly, terminal data security protection is urgent . Generally, vulnerability detection can be divided into detection of known vulnerabilities and detection of unknown vulnerabilities. The detection of known vulnerabilities mainly uses security scanning technology to detect whether there are published security vulnerabilities in the system; the purpose of unknown vulnerability detection is to discover possible but undiscovered vulnerabilities in the software system. ...

AI Technical Summary

Problems solved by technology

[0003] In view of the above-mentioned related technologies, the inventor believes that when detecting known vulnerabilities of applications or systems, it is easy to cause false alarms of vulnerabilities, which affects the normal operation of applications or systems

Images