Weak password detection system based on covert scanning technology

Abstract

The invention relates to the technical field of computer information processing, and particularly discloses a weak password detection system based on a covert scanning technology, which depends on an asset identification module to identify a to-be-target asset and an open port by using the covert scanning technology, and comprises covert information assets protected by a firewall and the like. The IP address and the port number are detailed; identifying protocols, services, interfaces and the like which are adopted by the target assets under the OSI model framework and need password interaction by depending on a feature library in the feature identification module; and carrying out weak password vulnerability detection by depending on the weak password detection module. Target information assets which cannot be detected due to existence of safety protection measures such as firewalls can be identified, and the situation that hidden target information assets cannot be detected by weak passwords is avoided; the feature library constructed based on the OSI model framework can comprehensively identify services, protocols, interfaces and the like of the target information assets needing password interaction, and omission is avoided.

Description

technical field [0001] The invention relates to the technical field of computer information processing, in particular to a weak password detection system based on concealed scanning technology. Background technique [0002] Today, with the wide application of information technology, more and more information assets are exposed on the Internet, and more and more information security threats and information security attacks are faced, resulting in an endless stream of information security incidents. So far, weak password vulnerabilities have been one of the important factors leading to information security incidents. [0003] Weak passwords usually refer to passwords that are easily guessed by others or cracked by cracking tools, such as birthdays, names, simple sequential numbers or characters, and consecutive keyboard letters (such as: 3456, 3abc, abcdef, qwerty, 1qaz2wsx etc.). The daily use of telnet, ssh, and snmp service protocols, weblogic, redis, mysql application co...

AI Technical Summary

Problems solved by technology

When security functions such as firewalls are enabled in the information system, there will be a possibility that the weak password detection system will not be able to discover the information assets of the target to be detected, thus missing the detection target

Common weak password detection systems usually use the weak password detection function of one or several services, protocols, or interfaces integrated by themselves to detect target information assets, and cannot target information assets that may have weak password vulnerabilities. Services, protocols, and interfaces, etc. Comprehensive identification and detection, and then there is the possibility of missing weak password vulnerabilities that cannot be detected

Images