A business system privilege breach detection method and device

By parsing permission rule files and building a permission benchmark library, the system automatically identifies and compares unauthorized access vulnerabilities in business systems, solving the problem of low efficiency in traditional tools and manual auditing, and achieving efficient and accurate detection and remediation suggestions for unauthorized access vulnerabilities.

CN122153919BActive Publication Date: 2026-07-24BEIJING CHAITIN TECH CO LTD
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202610617303.0
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2026-05-07
Publication Date
2026-07-24
Estimated Expiration
2046-05-07

Smart Images

  • Figure CN122153919B_ABST
    Figure CN122153919B_ABST
Patent Text Reader

Abstract

The application discloses a kind of business system overreach vulnerability detection method and device, it is related to network and system security technical field.The method includes: obtaining system project code, parses and identifies the permission rule file related to target business function;Analysis permission rule file, determine user identity authentication mechanism, business operation authorization mechanism and target business data attribution field;Obtain all data entities containing target business data attribution field, determine permission constraint condition according to user identity authentication mechanism, business operation authorization mechanism and target business data attribution field, and construct permission benchmark library;Based on permission benchmark library, track the code execution path of each API interface and mark the actual existing permission check point;The permission check point is compared with the permission constraint condition of corresponding data entity in permission benchmark library point by point, identifies missing permission check point and generates vulnerability report.The application realizes the efficient, accurate detection of overreach vulnerability.
Need to check novelty before this filing date? Find Prior Art

Citation Information

Patent Citations

  • Unauthorized verification method and device and electronic equipment

    CN116257824A

  • Unauthorized vulnerability detection method, device and equipment and readable storage medium

    CN121351092A