Path traversal vulnerability detection method

Abstract

The invention discloses a path traversal vulnerability detection method. The method comprises the following steps of 1, performing program instrumentation on a Java EE program through a byte code enhancement method; 2, by the instrumentation program, tracking the propagation path of data, obtained from the outside by the Java EE program, in the program; 3, when the instrumentation program finds that external data is directly propagated to the path traversal risk method without passing through a security filtering method, performing vulnerability detection logic judgment; and when the instrumentation program finds that the external data is propagated through the security filtering method, determining that the vulnerability does not exist. According to the method, the data flow direction during running of the application program can be tracked in real time during running of the Java EE program, the real forming process of the vulnerability and the specific code position of the vulnerability can be detected, and online, real-time, comprehensive and accurate vulnerability detection is achieved. Meanwhile, whether the vulnerability exists or not can be determined by analyzing the propagation paths of the stains in different scenes, and the possible utilization harm of the vulnerability can be given separately.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a path traversal vulnerability detection method. Background technique [0002] Existing technologies are mainly divided into two categories for PHP Web application vulnerability detection. One is black-box detection technology, which simulates hacker attacks to test applications, replays data packets with characteristic strings, and analyzes application responses according to the vulnerability principles of different types of vulnerabilities to detect vulnerabilities; the second category is code Auditing technology is to analyze the syntax and semantics of the application source code, and analyze the vulnerability of the program at the code level by simulating the data flow when the program is running, so as to achieve the purpose of vulnerability detection. Black-box detection technology needs to send a large number of data packets with characteristic strings for vulnerabilit...

AI Technical Summary

Problems solved by technology

Black-box detection technology needs to send a large number of data packets with characteristic strings for vulnerability detection, so this technology will generate a large amount of dirty data and dirty operations during the test process, and cannot Construct data packets, so black box detection technology also has problems such as low scene coverage

Code audit technology requires in-depth analysis of the source code of the application, which consumes a lot of time and cost, and because the technology analyzes the data when the simulation program is running, the rate of false positives for vulnerabilities is high

Images