Target application sensitive information detection method, device and equipment and storage medium

Abstract

The application discloses a target application sensitive information detection method and device, computer equipment and a storage medium. The method comprises the following steps: inputting data packet capture results and interface screenshots into a preset sensitive information detection model for sensitive information detection, obtaining and outputting corresponding sensitive information detection reports, wherein the sensitive information detection reports comprise sensitive information detection results, and the sensitive information detection results comprise various sensitive information and sensitive level information corresponding to the various sensitive information. The detection method provided by the application can detect sensitive information in the data packet capture results, i.e. whether sensitive information exists in background traffic, and can also detect sensitive information in the interface screenshots, i.e. whether sensitive information exists in foreground interface screenshots. In addition, the above detection process is automatically completed, and sensitive level information can be accurately obtained.

Description

Technical Field

[0001] This invention relates to the field of computer technology, and in particular to methods, apparatus, devices, and storage media for detecting sensitive information in target applications. Background Technology

[0002] Currently, sensitive information detection in apps relies on manual methods, where users manually click through each function page within the app to check for sensitive information. This existing solution is entirely manual, leading to problems such as varying levels of experience among personnel, insufficient attention to detail, and inconsistent detection standards.

[0003] Existing methods for detecting sensitive information in applications have the following drawbacks:

[0004] Disadvantage 1: The experience of different assessment and testing personnel varies, and the inspection may be careless, which may easily lead to inaccurate assessment results.

[0005] Disadvantage 2: Manual evaluation is subject to personal subjectivity, which can easily lead to inconsistent evaluation standards.

[0006] In summary, existing methods for detecting sensitive information in apps suffer from problems such as inconsistent evaluation standards and inaccurate evaluation results, which may lead to the leakage of sensitive information. Summary of the Invention

[0007] This application provides a method, apparatus, computer device, and storage medium for detecting sensitive information in a target application. To provide a basic understanding of some aspects of the disclosed embodiments, a brief summary is given below. This summary is not intended as a general description, nor is it intended to identify key / important components or describe the scope of protection of these embodiments. Its sole purpose is to present some concepts in a simple form as a prelude to the detailed description that follows.

[0008] In a first aspect, embodiments of this application provide a method for detecting sensitive information in a target application, the method comprising:

[0009] Capture data packets from the target application and obtain the corresponding data packet capture results;

[0010] In response to the simulated user's operation command, screenshots are taken of each interface of the simulated operation corresponding to the operation command to obtain screenshots of each interface.

[0011] The data packet capture results and screenshots of each interface are input into a preset sensitive information detection model for sensitive information detection, and a corresponding sensitive information detection report is obtained and output. The sensitive information detection report includes the sensitive information detection results, which include each sensitive information and the sensitivity level information corresponding to each sensitive information.

[0012] In one implementation, the step of capturing data packets from the target application to obtain the corresponding data packet capture results includes:

[0013] Install the target application on the emulator;

[0014] Configure the parameters of the preset packet capture tool, and use the preset packet capture tool to capture data packets from the target application to obtain the corresponding data packet capture results.

[0015] In one implementation, inputting the data packet capture results and screenshots of each interface into a preset sensitive information detection model for sensitive information detection includes:

[0016] The data packet capture results are input into the preset sensitive information detection model for sensitive information detection; and

[0017] The screenshots of each interface are input into the preset sensitive information detection model for sensitive information detection.

[0018] In one implementation, inputting the data packet capture result into the preset sensitive information detection model for sensitive information detection includes:

[0019] The system determines whether the data capture result contains first sensitive information based on the first preset sensitive information database. If at least one packet capture data in the data capture result is detected to contain any first sensitive information stored in the first preset sensitive information database, then the current packet capture data is determined to contain first sensitive information, and the first sensitive information is used as the first target sensitive information; otherwise, the current packet capture data is determined not to contain the first sensitive information.

[0020] In one embodiment, the method further includes:

[0021] When it is determined that the current packet capture data includes the first target sensitive information, the first target sensitive information and the corresponding first sensitivity level information are read and displayed on the display interface.

[0022] In one implementation, inputting the screenshots of each interface into the preset sensitive information detection model for sensitive information detection includes:

[0023] The text information in each of the screenshots is extracted to obtain the text information corresponding to each screenshot.

[0024] Based on the second preset sensitive information database, it is determined whether each text message contains second sensitive information. If it is detected that at least one of the text messages contains any second sensitive information stored in the second preset sensitive information database, then it is determined that the current text message contains second sensitive information, and the second sensitive information is used as the second target sensitive information; otherwise, it is determined that the current text message does not contain the second sensitive information.

[0025] In one embodiment, the method further includes:

[0026] When it is determined that the current text information includes the second target sensitive information, the second target sensitive information and the corresponding second sensitivity level information are read and displayed on the display interface.

[0027] Secondly, embodiments of this application provide a target application sensitive information detection device, the device comprising:

[0028] The packet capture module is used to capture data packets from the target application and obtain the corresponding packet capture results.

[0029] The screenshot module is used to respond to the operation instructions of the simulated user, and to perform screenshot processing on each interface of the simulated operation corresponding to the operation instructions to obtain screenshots of each interface.

[0030] The detection module is used to input the data packet capture results obtained by the data packet capture module and the screenshots of each interface obtained by the screenshot module into a preset sensitive information detection model to perform sensitive information detection, and obtain a corresponding sensitive information detection report. The sensitive information detection report includes the sensitive information detection results, which include each sensitive information and the sensitivity level information corresponding to each sensitive information.

[0031] The output module is used to output the sensitive information detection report obtained by the detection module.

[0032] Thirdly, embodiments of this application provide a computer device, including a memory and a processor, wherein the memory stores computer-readable instructions, and when the computer-readable instructions are executed by the processor, the processor performs the above-described method steps.

[0033] Fourthly, embodiments of this application provide a storage medium storing computer-readable instructions, which, when executed by one or more processors, cause the one or more processors to perform the above-described method steps.

[0034] The technical solutions provided in this application embodiment may include the following beneficial effects:

[0035] In this embodiment, data packets are captured from the target application to obtain corresponding data packet capture results. In response to simulated user operation commands, screenshots are taken of each interface corresponding to the simulated operation, resulting in screenshots of each interface. The data packet capture results and each screenshot are input into a preset sensitive information detection model for sensitive information detection, resulting in and outputting a corresponding sensitive information detection report. The sensitive information detection report includes the sensitive information detection results, which include various sensitive information items and their corresponding sensitivity level information. Using the detection method provided in this embodiment, due to the introduction of a preset sensitive information detection model, it is possible not only to detect sensitive information in the data packet capture results (i.e., to detect whether sensitive information exists in the background traffic), but also to detect sensitive information in each screenshot (i.e., to detect whether sensitive information exists in the foreground screenshot). Furthermore, the above process of detecting sensitive information is automated, effectively reducing manual costs and accurately obtaining the sensitivity level information corresponding to the sensitive information.

[0036] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and are not intended to limit the invention. Attached Figure Description

[0037] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with the invention and, together with the description, serve to explain the principles of the invention.

[0038] Figure 1 This is a flowchart illustrating a method for detecting sensitive information in a target application provided in an embodiment of this application;

[0039] Figure 2 This is a schematic diagram of the structure of a target application sensitive information detection device provided in an embodiment of this application. Detailed Implementation

[0040] The following description and accompanying drawings fully illustrate specific embodiments of the invention to enable those skilled in the art to practice them.

[0041] It should be understood that the described embodiments are merely some, not all, of the embodiments of the present invention. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without inventive effort are within the scope of protection of the present invention.

[0042] The optional embodiments of this disclosure are described in detail below with reference to the accompanying drawings.

[0043] Please see Figure 1 This is a flowchart illustrating a method for detecting sensitive information in a target application, as provided in an embodiment of this application. Figure 1 As shown, the target application sensitive information detection method in this application embodiment may include the following steps:

[0044] S101, capture data packets from the target application and obtain the corresponding data packet capture results.

[0045] In this embodiment of the application, no specific restrictions are placed on the target application, which can be a conventional application, and will not be described in detail here.

[0046] The packet capture tool used can be Fiddler. Fiddler is a commonly used web debugging tool that can record all HTTP and HTTPS requests between clients and servers. It allows monitoring, setting breakpoints, and even modifying input and output data. Fiddler includes a powerful event-based scripting subsystem and can be extended using .NET languages. Besides Fiddler, other packet capture tools can also be used, but they will not be discussed further here.

[0047] In one possible implementation, capturing data packets from the target application to obtain the corresponding data packet capture results includes the following steps:

[0048] Install the target application on the emulator;

[0049] Configure the parameters of the preset packet capture tool, and use the preset packet capture tool to capture data packets from the target application to obtain the corresponding data packet capture results.

[0050] In the embodiments of this application, the preset packet capture tool used can be Fiddler, as mentioned above, or other preset packet capture tools can be used, which will not be elaborated here.

[0051] When the default packet capture tool is Fiddler, the configured parameters are standard parameters, and the configuration method is also standard, so it will not be described in detail here.

[0052] S102, in response to the simulated user's operation command, performs screenshot processing on each interface of the simulated operation corresponding to the operation command, and obtains screenshots of each interface.

[0053] S103, input the data packet capture results and screenshots of each interface into the preset sensitive information detection model for sensitive information detection, obtain and output the corresponding sensitive information detection report, the sensitive information detection report includes the sensitive information detection results, the sensitive information detection results include each sensitive information and the sensitivity level information corresponding to each sensitive information.

[0054] In one possible implementation, inputting the data packet capture results and screenshots of various interfaces into a preset sensitive information detection model for sensitive information detection includes the following steps:

[0055] The data packet capture results are input into the preset sensitive information detection model for sensitive information detection.

[0056] In this application embodiment, a preset sensitive information detection model is provided, which can not only detect sensitive information in the data packet capture results, that is, detect whether there is sensitive information in the background traffic; it can also detect sensitive information in various interface screenshots, that is, detect whether there is sensitive information in the front-end interface screenshots; in addition, the above detection process is completed automatically, which can effectively reduce labor costs and accurately obtain sensitivity level information.

[0057] In this embodiment of the application, inputting the data packet capture results into a preset sensitive information detection model for sensitive information detection includes the following steps:

[0058] The system determines whether the data packet capture result contains first sensitive information based on the first preset sensitive information database. If at least one packet capture data in the data packet capture result is detected to contain any first sensitive information stored in the first preset sensitive information database, then it is determined that the current packet capture data contains first sensitive information, and the first sensitive information is used as the first target sensitive information; otherwise, it is determined that the current packet capture data does not contain first sensitive information.

[0059] In this embodiment of the application, various first sensitive information is stored in the first preset sensitive information database. If the current packet capture data includes any kind of first sensitive information, it is determined that the current packet capture data includes sensitive information.

[0060] In one possible implementation, the detection method provided in this embodiment further includes the following steps: when it is determined that the current packet capture data includes first target sensitive information, the first target sensitive information and the corresponding first sensitivity level information are read and displayed on the display interface.

[0061] As shown in Table 1 below, the detection method provided in this embodiment can not only accurately determine whether the current packet capture data includes first target sensitive information, but also read and display the first target sensitive information and the corresponding first sensitivity level information to the target user on the display interface. For example, as shown in Table 1 below: Data level: Sensitive level, Category: Level 3; In this way, it can accurately push warning information to the target user according to the above-mentioned first sensitivity level information to prompt the target user to deal with the sensitive information as soon as possible, delete the first target sensitive information, or modify the sensitive part in the first target sensitive information.

[0062] In this embodiment of the application, the sensitivity level information corresponding to each sensitive information can be obtained using the sensitive data classification matrix shown in Table 1 below, as detailed in Table 1 below:

[0063] Table 1: Sensitive Data Classification Matrix

[0064]

[0065]

[0066]

[0067]

[0068]

[0069]

[0070]

[0071] In one possible implementation, inputting the data packet capture results and screenshots of various interfaces into a preset sensitive information detection model for sensitive information detection includes the following steps:

[0072] Input screenshots of each interface into the preset sensitive information detection model for sensitive information detection.

[0073] In this embodiment of the application, inputting screenshots of various interfaces into a preset sensitive information detection model for sensitive information detection includes the following steps:

[0074] Extract the text information from each screenshot to obtain the corresponding text information for each screenshot.

[0075] The system determines whether each text message contains second sensitive information based on the second preset sensitive information database. If at least one text message in each text message is found to contain any second sensitive information stored in the second preset sensitive information database, then the current text message is determined to contain second sensitive information, and the second sensitive information is used as the second target sensitive information; otherwise, the current text message is determined not to contain second sensitive information.

[0076] In this embodiment, text information is extracted from each screenshot of the interface, and the built-in OCR recognition engine performs page information recognition and extraction on the screenshots to obtain the text information corresponding to each screenshot.

[0077] In this embodiment of the application, various second sensitive information are stored in the second preset sensitive information database. If the current text information includes any kind of second sensitive information, it is determined that the current text information includes sensitive information.

[0078] In one possible implementation, the detection method provided in this embodiment further includes the following steps: when it is determined that the current text information includes second target sensitive information, the second target sensitive information and the corresponding second sensitivity level information are read and displayed on the display interface.

[0079] As shown in Table 1 above, the detection method provided in this embodiment can not only accurately determine whether the current text information includes second target sensitive information, but also read and display the second target sensitive information and the corresponding second sensitivity level information to the target user on the display interface. For example, as shown in Table 1 above: Data level: Sensitive level, Category: Level 3; In this way, it can accurately push warning information to the target user according to the above-mentioned second sensitivity level information to prompt the target user to deal with the sensitive information as soon as possible, delete the second target sensitive information, or modify the sensitive part in the second target sensitive information.

[0080] In this embodiment, data packets are captured from the target application to obtain corresponding data packet capture results. In response to simulated user operation commands, screenshots are taken of each interface corresponding to the simulated operation, resulting in screenshots of each interface. The data packet capture results and each screenshot are input into a preset sensitive information detection model for sensitive information detection, resulting in and outputting a corresponding sensitive information detection report. The sensitive information detection report includes the sensitive information detection results, which include various sensitive information items and their corresponding sensitivity level information. Using the detection method provided in this embodiment, due to the introduction of a preset sensitive information detection model, it is possible not only to detect sensitive information in the data packet capture results (i.e., to detect whether sensitive information exists in the background traffic), but also to detect sensitive information in each screenshot (i.e., to detect whether sensitive information exists in the foreground screenshot). Furthermore, the above process of detecting sensitive information is automated, effectively reducing manual costs and accurately obtaining the sensitivity level information corresponding to the sensitive information.

[0081] The following are embodiments of the target application sensitive information detection device of the present invention, which can be used to execute the target application sensitive information detection method of the present invention. For details not disclosed in the embodiments of the target application sensitive information detection device of the present invention, please refer to the embodiments of the target application sensitive information detection method of the present invention.

[0082] Please see Figure 2This illustration shows a schematic diagram of a target application sensitive information detection device provided in an exemplary embodiment of the present invention. This target application sensitive information detection device can be implemented as all or part of a terminal through software, hardware, or a combination of both. The target application sensitive information detection device includes a data packet capture module 10, a screenshot module 20, a detection module 30, and an output module 40.

[0083] Specifically, the data packet capture module 10 is used to capture data packets from the target application and obtain the corresponding data packet capture results.

[0084] The screenshot module 20 is used to respond to the operation commands of the simulated user, perform screenshot processing on each interface of the simulated operation corresponding to the operation command, and obtain screenshots of each interface.

[0085] The detection module 30 is used to input the data packet capture results obtained by the data packet capture module 10 and the screenshots obtained by the screenshot module 20 into the preset sensitive information detection model for sensitive information detection, and obtain the corresponding sensitive information detection report. The sensitive information detection report includes the sensitive information detection results, which include each sensitive information and the sensitivity level information corresponding to each sensitive information.

[0086] Output module 40 is used to output the sensitive information detection report obtained by detection module 30.

[0087] Optionally, the data packet capture module 10 is specifically used for:

[0088] Install the target application on the emulator;

[0089] Configure the parameters of the preset packet capture tool, and use the preset packet capture tool to capture data packets from the target application to obtain the corresponding data packet capture results.

[0090] Optionally, the detection module 30 is used for:

[0091] The data packet capture results are input into a preset sensitive information detection model for sensitive information detection; and

[0092] Input screenshots of each interface into the preset sensitive information detection model for sensitive information detection.

[0093] Optionally, the detection module 30 is specifically used for:

[0094] The system determines whether the data packet capture result contains first sensitive information based on the first preset sensitive information database. If at least one packet capture data in the data packet capture result is detected to contain any first sensitive information stored in the first preset sensitive information database, then it is determined that the current packet capture data contains first sensitive information, and the first sensitive information is used as the first target sensitive information; otherwise, it is determined that the current packet capture data does not contain first sensitive information.

[0095] Optionally, the device further includes:

[0096] The first reading and display module (in) Figure 2 (Not shown in the image) is used to read and display the first target sensitive information and the corresponding first sensitivity level information on the display interface when the detection module 30 determines that the current packet capture data includes the first target sensitive information.

[0097] Optionally, the detection module 30 is specifically used for:

[0098] Extract the text information from each screenshot to obtain the corresponding text information for each screenshot.

[0099] The system determines whether each text message contains second sensitive information based on the second preset sensitive information database. If at least one text message in each text message is found to contain any second sensitive information stored in the second preset sensitive information database, then the current text message is determined to contain second sensitive information, and the second sensitive information is used as the second target sensitive information; otherwise, the current text message is determined not to contain second sensitive information.

[0100] Optionally, the device further includes:

[0101] The second reading and display module (in) Figure 2 (Not shown in the text) is used to read and display the second target sensitive information and the corresponding second sensitivity level information on the display interface when the detection module 30 determines that the current text information includes second target sensitive information.

[0102] It should be noted that the target application sensitive information detection device provided in the above embodiments is only illustrated by the division of the above functional modules when executing the target application sensitive information detection method. In practical applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the device can be divided into different functional modules to complete all or part of the functions described above. In addition, the target application sensitive information detection device and the target application sensitive information detection method embodiments provided in the above embodiments belong to the same concept, and the implementation process is detailed in the target application sensitive information detection method embodiments, which will not be repeated here.

[0103] In this embodiment, the data packet capture module is used to capture data packets from the target application and obtain corresponding data packet capture results; the screenshot module is used to respond to the simulated user's operation commands and perform screenshot processing on each interface of the simulated operation corresponding to the operation commands to obtain screenshots of each interface; the detection module is used to input the data packet capture results obtained by the data packet capture module and the screenshots of each interface obtained by the screenshot module into a preset sensitive information detection model for sensitive information detection, and obtain a corresponding sensitive information detection report, which includes sensitive information detection results, including each sensitive information and the sensitivity level information corresponding to each sensitive information; and the output module is used to output the sensitive information detection report obtained by the detection module. Using the detection device provided in this embodiment, due to the introduction of the preset sensitive information detection model, it can not only detect sensitive information in the data packet capture results, i.e., detect whether sensitive information exists in the background traffic; it can also detect sensitive information in each interface screenshot, i.e., detect whether sensitive information exists in the foreground interface screenshot; in addition, the above process of detecting sensitive information is completed automatically, effectively reducing manual costs, and can accurately obtain the sensitivity level information corresponding to the sensitive information.

[0104] In one embodiment, a computer device is provided, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, it performs the following steps: capturing data packets of a target application to obtain corresponding data packet capture results; responding to simulated user operation commands, taking screenshots of each interface of the simulated operation corresponding to the operation commands to obtain screenshots of each interface; and inputting the data packet capture results and each interface screenshot into a preset sensitive information detection model for sensitive information detection, obtaining and outputting a corresponding sensitive information detection report, wherein the sensitive information detection report includes sensitive information detection results, and the sensitive information detection results include each sensitive information and the sensitivity level information corresponding to each sensitive information.

[0105] In one embodiment, a storage medium storing computer-readable instructions is provided. When executed by one or more processors, the computer-readable instructions cause the one or more processors to perform the following steps: capturing data packets of a target application to obtain corresponding data packet capture results; responding to simulated user operation commands, taking screenshots of each interface of the simulated operation corresponding to the operation commands to obtain screenshots of each interface; and inputting the data packet capture results and each interface screenshot into a preset sensitive information detection model for sensitive information detection, obtaining and outputting a corresponding sensitive information detection report, wherein the sensitive information detection report includes sensitive information detection results, and the sensitive information detection results include each sensitive information and the sensitivity level information corresponding to each sensitive information.

[0106] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. This computer program can be stored in a computer-readable storage medium, and when executed, it can include the processes of the embodiments of the methods described above. The aforementioned storage medium can be a non-volatile storage medium such as a magnetic disk, optical disk, or read-only memory (ROM), or random access memory (RAM).

[0107] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0108] The above embodiments merely illustrate several implementation methods of the present invention, and their descriptions are relatively specific and detailed, but they should not be construed as limiting the scope of the present invention. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of the present invention, and these all fall within the protection scope of the present invention. Therefore, the protection scope of this patent should be determined by the appended claims.

Claims

1. A method for detecting sensitive information in a target application, characterized in that, The method includes: Capture data packets from the target application and obtain the corresponding data packet capture results; In response to the simulated user's operation command, screenshots are taken of each interface of the simulated operation corresponding to the operation command to obtain screenshots of each interface. The data packet capture results and screenshots of each interface are input into a preset sensitive information detection model for sensitive information detection, and a corresponding sensitive information detection report is obtained and output. The sensitive information detection report includes sensitive information detection results, which include each sensitive information and the sensitivity level information corresponding to each sensitive information. The detection of the packet capture results is to detect whether there is sensitive information in the background traffic, and the detection of the screenshots is to detect whether there is sensitive information in the screenshots of the front-end interface. The process of capturing data packets from the target application to obtain the corresponding data packet capture results includes: Install the target application on the emulator; Configure the parameters of the preset packet capture tool, and use the preset packet capture tool to capture data packets from the target application to obtain the corresponding data packet capture results. The preset packet capture tool is used to record all HTTP and HTTPS requests from clients and servers. The preset packet capture tool allows monitoring, setting breakpoints, and modifying input and output data. The preset packet capture tool can be extended. The packet capture tool includes an event script-based subsystem and can be extended using the target language. The step of inputting the data packet capture results and screenshots of each interface into a preset sensitive information detection model for sensitive information detection includes: The data packet capture results are input into the preset sensitive information detection model for sensitive information detection; and the screenshots of each interface are input into the preset sensitive information detection model for sensitive information detection. The step of inputting the screenshots of each interface into the preset sensitive information detection model for sensitive information detection includes: The text information in each screenshot is extracted to obtain the text information corresponding to each screenshot. Based on the second preset sensitive information database, it is determined whether each text information contains second sensitive information. If at least one of the text information is found to contain any second sensitive information stored in the second preset sensitive information database, it is determined that the current text information contains second sensitive information and the second sensitive information is used as the second target sensitive information. Otherwise, it is determined that the current text information does not contain the second sensitive information.

2. The method according to claim 1, characterized in that, The step of inputting the data packet capture result into the preset sensitive information detection model for sensitive information detection includes: The system determines whether the data capture result contains first sensitive information based on the first preset sensitive information database. If at least one packet capture data in the data capture result is detected to contain any first sensitive information stored in the first preset sensitive information database, then the current packet capture data is determined to contain first sensitive information, and the first sensitive information is used as the first target sensitive information; otherwise, the current packet capture data is determined not to contain the first sensitive information.

3. The method according to claim 2, characterized in that, The method further includes: When it is determined that the current packet capture data includes the first target sensitive information, the first target sensitive information and the corresponding first sensitivity level information are read and displayed on the display interface.

4. The method according to claim 1, characterized in that, The method further includes: When it is determined that the current text information includes the second target sensitive information, the second target sensitive information and the corresponding second sensitivity level information are read and displayed on the display interface.

5. A device for detecting sensitive information in a target application, characterized in that, The device includes: The packet capture module is used to capture data packets from the target application and obtain the corresponding packet capture results. The screenshot module is used to respond to the operation instructions of the simulated user, and to perform screenshot processing on each interface of the simulated operation corresponding to the operation instructions to obtain screenshots of each interface. The detection module is used to input the data packet capture results obtained by the data packet capture module and the various interface screenshots obtained by the screenshot module into a preset sensitive information detection model for sensitive information detection, and to obtain a corresponding sensitive information detection report. The sensitive information detection report includes sensitive information detection results, which include various sensitive information and the sensitivity level information corresponding to each sensitive information. The detection of the packet capture results is to detect whether there is sensitive information in the background traffic, and the detection of the interface screenshots is to detect whether there is sensitive information in the front-end interface screenshots. The output module is used to output the sensitive information detection report obtained by the detection module; The data packet capture module is specifically used for: Install the target application on the emulator; Configure the parameters of the preset packet capture tool, and use the preset packet capture tool to capture data packets from the target application to obtain the corresponding data packet capture results. The preset packet capture tool is used to record all HTTP and HTTPS requests from clients and servers. The preset packet capture tool allows monitoring, setting breakpoints, and modifying input and output data. The preset packet capture tool can be extended. The packet capture tool includes an event script-based subsystem and can be extended using the target language. The step of inputting the data packet capture results and screenshots of each interface into a preset sensitive information detection model for sensitive information detection includes: The data packet capture results are input into the preset sensitive information detection model for sensitive information detection; and the screenshots of each interface are input into the preset sensitive information detection model for sensitive information detection. The step of inputting the screenshots of each interface into the preset sensitive information detection model for sensitive information detection includes: The text information in each screenshot is extracted to obtain the text information corresponding to each screenshot. Based on the second preset sensitive information database, it is determined whether each text information contains second sensitive information. If at least one of the text information is found to contain any second sensitive information stored in the second preset sensitive information database, it is determined that the current text information contains second sensitive information and the second sensitive information is used as the second target sensitive information. Otherwise, it is determined that the current text information does not contain the second sensitive information.

6. A computer device comprising a memory and a processor, the memory storing computer-readable instructions which, when executed by the processor, cause the processor to perform the steps of the detection method as claimed in any one of claims 1 to 4.

7. A storage medium storing computer-readable instructions, which, when executed by one or more processors, cause the one or more processors to perform the steps of the detection method as claimed in any one of claims 1 to 4.

Images