Website vulnerability online evaluation method and device

Abstract

The embodiment of the invention relates to the field of internet security, and particularly discloses a website vulnerability online evaluation method and device. According to the embodiment of the invention, information collection is carried out on a target website, exposure information of the target website is obtained, vulnerability detection of a system layer and a target layer is carried out on the target website according to the exposure information, and a target vulnerability of the target website and corresponding vulnerability information are obtained; obtaining access data of the target website, and analyzing the access data and the vulnerability information to obtain a vulnerability type of the target vulnerability; and integrating the access data and the vulnerability type, and performing vulnerability risk assessment on the target vulnerability to obtain vulnerability assessment information. According to the technical scheme, comprehensive vulnerability detection can be carried out on the target website from the system layer and the target layer according to the exposure information of the target website, and comprehensive risk assessment is carried out on the target vulnerability according to the access data and the vulnerability type of the target website, so that assessment of the website vulnerability is more reasonable, and more normative guidance can be conveniently provided for website vulnerability repair.

Description

technical field [0001] The invention belongs to the field of Internet security, and in particular relates to a method and device for online assessment of website vulnerabilities. Background technique [0002] With the wider application of Internet technology, many people's daily work and entertainment are carried out on the Internet, and the Internet has been closely related to people's lives. Therefore, the security of the website has been paid more and more attention by people. However, there are various security holes in the network. Vulnerability discovery is a key process in the confrontation between the attacker and the defender. If the defender cannot discover the exploitable vulnerability earlier than the attacker, the attacker may use the vulnerability to launch an attack. The earlier a vulnerability is discovered and fixed, the less likely an information security incident will occur. [0003] Website vulnerability detection usually refers to a security detection...

AI Technical Summary

Problems solved by technology

Existing website vulnerability detection is usually relatively simple. It only scans vulnerabilities based on the established vulnerability database, and cannot comprehensively consider the application of the website for risk assessment, resulting in a single vulnerability risk assessment.

Images