Computer network security detection system and method

Abstract

The present invention discloses a computer network security detection system and method, including a virtual verification system, the virtual verification system is connected to a secondary loading unit, the virtual verification system is used to provide a temporary installation space for an APP to be loaded, control the APP to be loaded to load and run the APP after authorization, and verify the corresponding authority of the information obtained by the APP after virtual sensitive information simulation. The present invention relates to the field of network security detection technology. The computer network security detection system and method, by constructing a temporary installation space for the APP, conducts a trial run on the APP, and provides a data source by simulating false sensitive information, and then verifies the authority of sensitive information by means of authority classification, effectively identifies the degree of sensitive information acquisition of the APP, and implements security detection of the APP, effectively ensuring the network security of computer users when installing APPs from unknown sources, and ensuring the security of computer users when using APPs.

Description

Technical Field

[0001] The present invention relates to the technical field of network security detection, and in particular to a computer network security detection system and method. Background Art

[0002] The emergence of the Internet has brought people more colorful, fast and convenient information dissemination and reception, and has greatly expanded the utilization rate of information resources in time and space. However, the security of information resources has also brought great problems to the entire Internet. In actual computer network applications, problems such as computer viruses and hacker attacks are emerging in an endless stream. Computer hackers take advantage of computer system loopholes and design flaws in communication protocols to illegally steal information resources, user passwords, etc., and access users' confidential information.

[0003] Computers loaded with apps from unknown sources are a major disaster area for network security. When running, apps with viruses often steal chat and web browsing information of computer users, resulting in leakage of user information. In serious cases, they may even damage the user's computer system. In serious cases, they may even paralyze the entire computer network, causing users to suffer huge economic losses. For this reason, a computer network security detection system and method are proposed. By constructing a temporary installation space for the APP, the APP is tested, and a data source is provided by simulating false sensitive information. Then, the permission of sensitive information is verified by permission classification, and the degree of sensitive information acquisition of the APP is effectively identified. Security detection of the APP is implemented, which effectively ensures the network security of computer users when installing apps from unknown sources and the security of computer users when using the APP. Summary of the invention

[0004] 1. Technical issues to be resolved

[0005] In view of the deficiencies in the prior art, the present invention provides a computer network security detection system and method, which solves the problem that computers loaded with APPs of unknown origin are a major disaster area for network security. APPs with viruses often steal computer users' chat and web browsing information when running, resulting in leakage of user information. In severe cases, they may even damage the user's computer system and even paralyze the entire computer network, causing the user to suffer huge economic losses.

[0006] (II) Technical solution

[0007] To achieve the above objectives, the present invention is implemented through the following technical solutions: a computer network security detection system, including a virtual verification system, which is connected to a secondary loading unit, and is used to provide a temporary installation space for the APP to be loaded, control the loading and running of the APP after the APP to be loaded is authorized, and after virtual sensitive information simulation, the corresponding permissions of the information obtained by the APP are verified to achieve security detection of the APP. The virtual verification system includes a permission classification unit, a classification storage unit and a simulation loading unit, and the permission classification unit is used to classify the false simulated sensitive information and non-sensitive information according to the permission type from the false simulated information on the network or randomly edited. The information is classified, the permission classification unit is connected to the classification storage unit, the classification storage unit is used to randomly shuffle the classified sensitive information and then perform secondary simulation, and store the corresponding sensitive information and non-sensitive information according to the chat scenario and the web browsing scenario, the classification storage unit is connected to the simulation loading unit, the simulation loading unit is used to control the APP to be loaded to obtain the set authorization, load and run the APP, after performing virtual sensitive information simulation, verify the corresponding authority of the information obtained by the APP, the simulation loading unit is connected to the secondary loading unit, and is used to load the APP that has been verified by the simulation loading unit, and obtain information backup and perform corresponding authority verification after the APP is loaded.

[0008] By adopting the above technical solution, a temporary installation space for the APP is constructed, the APP is tested, and a data source is provided by simulating false sensitive information. The permission of sensitive information is then verified through permission classification, and the degree of sensitive information acquisition of the APP is effectively identified. The security detection of the APP is implemented, effectively ensuring the network security of computer users when installing APPs from unknown sources, and ensuring the security of computer users when using APPs.

[0009] The present invention is further configured as follows: the permission classification unit includes a network database, a sensitive classification module and a desensitizing classification module, and the network database is connected to the sensitive classification module and the desensitizing classification module respectively.

[0010] The present invention is further configured as follows: the network database is used to edit and store false chat language, pictures and network browsing information from the cloud or randomly;

[0011] The sensitive classification module is used to filter out sensitive information from the network database, classify the sensitive information according to the permission classification, and synchronize the classified sensitive information to the classification storage unit;

[0012] The desensitizing classification module is used to filter out non-sensitive information from the network database, and classify the non-sensitive information according to the nature of the information, and directly synchronize the classified non-sensitive information to the classification storage unit.

[0013] By adopting the above technical solution, false information is simulated, and sensitive information and non-sensitive information are classified according to authority classification, which provides convenient conditions for subsequent authority verification and makes the verification process faster.

[0014] The present invention is further configured as follows: the classification storage unit includes a sensitive information simulation module, a screening and writing module, a chat simulation storage module and a browsing simulation storage module; the sensitive information simulation module is connected to the screening and writing module; and the screening and writing module is respectively connected to the chat simulation storage module and the browsing simulation storage module.

[0015] The present invention is further configured as follows: the sensitive information simulation module is used to randomly shuffle the sensitive information classified in the permission classification unit and then perform secondary simulation;

[0016] The screening and writing module is used to screen out sensitive information adapted to the chat scenario from the sensitive information simulation module and transmit it to the chat simulation storage module, and to screen out sensitive information adapted to the web browsing scenario from the sensitive information simulation module and transmit it to the browsing simulation storage module;

[0017] The chat simulation storage module is used to receive and store sensitive information corresponding to the chat scene synchronized by the screening and writing module;

[0018] The browsing simulation storage module is used to receive and store sensitive information corresponding to the web browsing scene synchronized by the screening and writing module.

[0019] By adopting the above technical solution, the simulated false information is randomly shuffled and then simulated twice, so as to further ensure the falsity of the simulated information, and the secondary simulated information is screened for scene adaptation to ensure the targeted security verification of information when computer users are chatting and browsing the web.

[0020] The present invention is further configured as follows: the simulation loading unit includes an authority setting module, a simulation operation module, an authority verification module and an abnormal alarm module, the authority setting module is connected to the simulation operation module, the simulation operation module is connected to the authority verification module, and the authority verification module is connected to the abnormal alarm module.

[0021] The present invention is further configured as follows: the permission setting module is used to install the APP to be loaded into the virtual verification system after the permission of the APP to be loaded is authorized and set;

[0022] The simulation operation module is used to open the APP for operation, and control the screening and writing module to obtain sensitive information, and control the corresponding sensitive information to run in the corresponding scenario;

[0023] The permission verification module is used to monitor and verify the sensitive information obtained during the operation of the APP. When sensitive information that does not correspond to the permission set in the permission setting module is not detected, a security signal is sent to the secondary loading unit. When sensitive information that does not correspond to the permission set in the permission setting module is detected, an abnormal mark is made and the corresponding sensitive information is transmitted to the abnormal alarm module;

[0024] The abnormal alarm module is used to receive sensitive information with abnormal marks sent by the authority verification module and send an alarm to the computer user.

[0025] The present invention is further configured as follows: the secondary loading unit includes a normal loading module, an information backup module and a secondary verification module, the normal loading module is connected to the information backup module, and the information backup module is connected to the authority verification module.

[0026] The present invention is further configured as follows: the normal loading module is used to load the APP after receiving the safety signal sent by the simulation loading unit;

[0027] The information backup module is used to back up the information acquired by the loaded APP;

[0028] The secondary verification module is used to verify the relevant permissions of the information in the information backup module, and when unauthorized information is found, an alarm is issued to the computer user.

[0029] By adopting the above technical solution, the loaded APP is continuously tracked and verified, so that continuous security protection is provided after the APP is loaded on the computer.

[0030] The present invention also discloses a computer network security detection method, which specifically comprises the following steps:

[0031] Step 1: Permission classification: The network database edits false chat language, pictures and web browsing information from the cloud or randomly and stores them. The sensitive classification module selects sensitive information from the network database and classifies the sensitive information according to the permission classification. The classified sensitive information is synchronized to the classification storage unit. The desensitization classification module selects non-sensitive information from the network database and classifies the non-sensitive information according to the nature of the information. The classified non-sensitive information is directly synchronized to the classification storage unit.

[0032] Step 2, classified storage: the sensitive information simulation module randomly shuffles the sensitive information classified in the permission classification unit and then performs a secondary simulation; the screening and writing module screens out the sensitive information adapted to the chat scenario from the sensitive information simulation module and transmits it to the chat simulation storage module; and screens out the sensitive information adapted to the web browsing scenario from the sensitive information simulation module and transmits it to the browsing simulation storage module; the chat simulation storage module receives the sensitive information corresponding to the chat scenario synchronized by the screening and writing module and stores it; the browsing simulation storage module is used to receive the sensitive information corresponding to the web browsing scenario synchronized by the screening and writing module and store it;

[0033] Step 3, simulated loading: After the permission setting module authorizes and sets the permissions of the APP to be loaded, the APP to be loaded is installed into the virtual verification system. The simulated operation module is used to open the APP for operation, and control the screening and writing module to obtain sensitive information, and manipulate the corresponding sensitive information to run in the corresponding scenario. The permission verification module monitors and verifies the sensitive information obtained during the operation of the APP. When sensitive information that does not correspond to the permissions set in the permission setting module is not detected, a security signal is sent to step 4. When sensitive information that does not correspond to the permissions set in the permission setting module is detected, after abnormal marking, the corresponding sensitive information is transmitted to the abnormal alarm module. The abnormal alarm module receives the sensitive information with abnormal marking sent by the permission verification module and sends an alarm to the computer user;

[0034] Step 4, secondary loading: After the normal loading module receives the security signal sent in step 3, it loads the APP. The information backup module backs up the information obtained by the loaded APP. The secondary verification module is used to verify the relevant permissions of the information in the information backup module. When unauthorized information is found, an alarm is issued to the computer user.

[0035] (III) Beneficial effects

[0036] The present invention provides a computer network security detection system and method. It has the following beneficial effects:

[0037] (1) The computer network security detection system and method construct a temporary installation space for the APP, test-run the APP, provide a data source by simulating false sensitive information, and then verify the permission of sensitive information by permission classification, effectively identify the degree of sensitive information acquisition of the APP, and implement security detection of the APP, effectively ensuring the network security of computer users when installing APPs from unknown sources, and ensuring the security of computer users when using APPs.

[0038] (2) The computer network security detection system and method simulates false information and classifies sensitive information and non-sensitive information according to authority classification, thereby providing convenient conditions for subsequent authority verification and making the verification process faster.

[0039] (3) The computer network security detection system and method further ensure the falsity of the simulated information by randomly scrambling the simulated false information and then performing a secondary simulation, and perform scene adaptation screening on the secondary simulated information to ensure targeted security verification of information when computer users are chatting and browsing the web.

[0040] (4) The computer network security detection system and method provide continuous security protection after the APP is loaded on the computer by continuously tracking and verifying the loaded APP. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] Figure 1 It is a system principle block diagram of the present invention;

[0042] Figure 2 This is a system principle block diagram of the secondary loading unit of the present invention;

[0043] Figure 3 It is a system principle block diagram of the permission classification unit of the present invention;

[0044] Figure 4 It is a system principle block diagram of the classification storage unit of the present invention;

[0045] Figure 5 This is a system principle block diagram of the simulation loading unit of the present invention.

[0046] In the figure, 1. virtual verification system; 2. secondary loading unit; 3. authority classification unit; 4. classification storage unit; 5. simulation loading unit; 6. network database; 7. sensitive classification module; 8. desensitizing classification module; 9. sensitive information simulation module; 10. screening and writing module; 11. chat simulation storage module; 12. browsing simulation storage module; 13. authority setting module; 14. simulation operation module; 15. authority verification module; 16. abnormal alarm module; 17. normal loading module; 18. information backup module; 19. secondary verification module. DETAILED DESCRIPTION

[0047] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0048] See also Figure 1-5 , the embodiment of the present invention provides the following two technical solutions:

[0049] Embodiment 1

[0050] A computer network security detection system includes a virtual verification system 1, which is connected to a secondary loading unit 2. The virtual verification system 1 is used to provide a temporary installation space for an APP to be loaded, control the APP to be loaded to load and run the APP after authorization, and verify the corresponding permissions of the information obtained by the APP after virtual sensitive information simulation to achieve security detection of the APP. The virtual verification system 1 includes a permission classification unit 3, a classification storage unit 4 and a simulation loading unit 5. The permission classification unit 3 is used to classify false simulated sensitive information and non-sensitive information according to permission types from false simulated information on the network or randomly edited. The permission classification unit 3 is connected to the classification storage unit 4. The classification storage unit 4 is used to randomly shuffle the classified sensitive information and perform secondary simulation, and store the corresponding sensitive information and non-sensitive information according to the chat scene and the web browsing scene. The classification storage unit 4 is connected to the simulation loading unit 5. The simulation loading unit 5 is used to control the APP to be loaded to obtain the set authorization and then load and run the APP. After the virtual sensitive information simulation is performed, the corresponding authority of the information obtained by the APP is verified. The simulation loading unit 5 is connected to the secondary loading unit 2, and is used to load the APP that has been verified by the simulation loading unit 5. After the APP is loaded, the information is backed up and the corresponding authority verification is performed. It is further explained that by constructing a temporary installation space for the APP, the APP is tested, and a data source is provided by simulating false sensitive information, and then the authority verification of sensitive information is performed by authority classification, the degree of sensitive information acquisition of the APP is effectively identified, and security detection of the APP is implemented, which effectively ensures the network security of computer users when installing APPs from unknown sources and the security of computer users when using APPs.

[0051] Embodiment 2

[0052] This embodiment is an improvement of the previous embodiment. A computer network security detection system includes a virtual verification system 1. The virtual verification system 1 is connected to a secondary loading unit 2. Specifically, as shown in the attached Figure 1 As shown, the virtual verification system 1 includes a permission classification unit 3, a classification storage unit 4 and a simulation loading unit 5. The virtual verification system 1 is used to provide a temporary installation space for the APP to be loaded, control the loading and running of the APP after authorization, and after simulating virtual sensitive information, verify the corresponding permissions of the information obtained by the APP to achieve security detection of the APP.

[0053] As a preferred solution, the permission classification unit 3 is used to classify the false simulated sensitive information and non-sensitive information according to the permission type from the false simulated information on the network or randomly edited. Figure 3 As shown, the permission classification unit 3 includes a network database 6, a sensitive classification module 7 and a desensitizing classification module 8. The network database 6 is connected to the sensitive classification module 7 and the desensitizing classification module 8 respectively. As a detailed description, the network database 6 is used to edit false chat language, pictures and network browsing information from the cloud or randomly, and store them;

[0054] The sensitive classification module 7 is used to filter out sensitive information from the network database 6, and classify the sensitive information according to the authority classification, and synchronize the classified sensitive information to the classification storage unit 4;

[0055] The desensitizing classification module 8 is used to filter out non-sensitive information from the network database 6, and classify the non-sensitive information according to the nature of the information, and directly synchronize the classified non-sensitive information to the classification storage unit 4.

[0056] As a preferred solution, the permission classification unit 3 is connected to the classification storage unit 4, and the classification storage unit 4 is used to randomly shuffle the classified sensitive information and perform secondary simulation, and store the corresponding sensitive information and non-sensitive information according to the chat scene and web browsing scene. Specifically, as shown in the attached Figure 4 As shown, the classification storage unit 4 includes a sensitive information simulation module 9, a screening and writing module 10, a chat simulation storage module 11 and a browsing simulation storage module 12. The sensitive information simulation module 9 is connected to the screening and writing module 10, and the screening and writing module 10 is connected to the chat simulation storage module 11 and the browsing simulation storage module 12 respectively. As a detailed description, the sensitive information simulation module 9 is used to randomly shuffle the sensitive information classified in the permission classification unit 3 and then perform secondary simulation;

[0057] The screening and writing module 10 is used to screen out sensitive information adapted to the chat scenario from the sensitive information simulation module 9, and transmit it to the chat simulation storage module 11, and screen out sensitive information adapted to the web browsing scenario from the sensitive information simulation module 9, and transmit it to the browsing simulation storage module 12;

[0058] The chat simulation storage module 11 is used to receive and store the sensitive information corresponding to the chat scene synchronized by the screening and writing module 10;

[0059] The browsing simulation storage module 12 is used to receive and store the sensitive information corresponding to the web browsing scene synchronized by the screening and writing module 10.

[0060] As a preferred solution, the classification storage unit 4 is connected to the simulation loading unit 5, and the simulation loading unit 5 is used to control the APP to be loaded to obtain the set authorization and then load and run the APP. After simulating the virtual sensitive information, the corresponding authority of the information obtained by the APP is verified. Specifically, as shown in the attached Figure 5 As shown, the simulation loading unit 5 includes a permission setting module 13, a simulation operation module 14, a permission verification module 15 and an abnormal alarm module 16. The permission setting module 13 is connected to the simulation operation module 14, the simulation operation module 14 is connected to the permission verification module 15, and the permission verification module 15 is connected to the abnormal alarm module 16. As a detailed description, the permission setting module 13 is used to install the APP to be loaded into the virtual verification system 1 after the permission of the APP to be loaded is authorized and set;

[0061] The simulation operation module 14 is used to open the APP to run, and control the screening and writing module 10 to obtain sensitive information, and control the corresponding sensitive information to run in the corresponding scenario;

[0062] The permission verification module 15 is used to monitor and verify the sensitive information obtained during the operation of the APP. When sensitive information that does not correspond to the permission set in the permission setting module 13 is not detected, a security signal is sent to the secondary loading unit 2. When sensitive information that does not correspond to the permission set in the permission setting module 13 is detected, an abnormal mark is made and the corresponding sensitive information is transmitted to the abnormal alarm module 16;

[0063] The abnormal alarm module 16 is used to receive sensitive information with abnormal marks sent by the authority verification module 15 and send an alarm to the computer user.

[0064] As a preferred solution, the simulation loading unit 5 is connected to the secondary loading unit 2 to load the APP that has been verified by the simulation loading unit 5. After the APP is loaded, the information is backed up and the corresponding authority verification is performed. Specifically, as shown in the attached Figure 2 As shown, the secondary loading unit 2 includes a normal loading module 17, an information backup module 18 and a secondary verification module 19. The normal loading module 17 is connected to the information backup module 18, and the information backup module 18 is connected to the authority verification module 15. As a detailed description, the normal loading module 17 is used to load the APP after receiving the security signal sent by the simulation loading unit 5;

[0065] The information backup module 18 is used to back up the information obtained by the loaded APP;

[0066] The secondary verification module 19 is used to verify the relevant permissions of the information in the information backup module 18, and to send an alarm to the computer user when unauthorized information is found.

[0067] The advantages of the second embodiment over the first embodiment are: by simulating false information and classifying sensitive information and non-sensitive information according to authority classification, convenient conditions are provided for subsequent authority verification, and the verification process is faster. The simulated false information is randomly shuffled and then simulated again to further ensure the degree of falsehood of the simulated information, and the secondary simulated information is screened for scene adaptation to ensure targeted security verification of information when computer users are chatting and browsing the web.

[0068] The above-mentioned computer network security detection method specifically includes the following steps:

[0069] Step 1, authority classification: the network database 6 edits false chat language, pictures and web browsing information from the cloud or randomly, and stores them. The sensitive classification module 7 selects sensitive information from the network database 6, and classifies the sensitive information according to the authority classification, and synchronizes the classified sensitive information to the classification storage unit 4. The desensitization classification module 8 selects non-sensitive information from the network database 6, and classifies the non-sensitive information according to the nature of the information, and directly synchronizes the classified non-sensitive information to the classification storage unit 4;

[0070] Step 2, classified storage: the sensitive information simulation module 9 randomly shuffles the sensitive information classified in the permission classification unit 3 and then performs secondary simulation; the screening and writing module 10 screens out the sensitive information adapted to the chat scene from the sensitive information simulation module 9, and transmits it to the chat simulation storage module 11; and screens out the sensitive information adapted to the web browsing scene from the sensitive information simulation module 9, and transmits it to the browsing simulation storage module 12; the chat simulation storage module 11 receives the sensitive information corresponding to the chat scene synchronized by the screening and writing module 10, and stores it; the browsing simulation storage module 12 is used to receive the sensitive information corresponding to the web browsing scene synchronized by the screening and writing module 10, and stores it;

[0071] Step 3, simulated loading: after the permission setting module 13 authorizes and sets the permission of the APP to be loaded, the APP to be loaded is installed in the virtual verification system 1, the simulated operation module 14 is used to open the APP for operation, and control the screening and writing module 10 to obtain sensitive information, and manipulate the corresponding sensitive information to run in the corresponding scenario, the permission verification module 15 monitors and verifies the sensitive information obtained during the operation of the APP, and when no sensitive information that does not correspond to the permission set in the permission setting module 13 is detected, a security signal is sent to step 4, and when sensitive information that does not correspond to the permission set in the permission setting module 13 is detected, after abnormal marking, the corresponding sensitive information is transmitted to the abnormal alarm module 16, and the abnormal alarm module 16 receives the sensitive information with abnormal marking sent by the permission verification module 15, and sends an alarm to the computer user;

[0072] Step 4, secondary loading: After the normal loading module 17 receives the security signal sent in step 3, it loads the APP, and the information backup module 18 backs up the information obtained by the loaded APP. The secondary verification module 19 is used to verify the relevant permissions of the information in the information backup module 18. When unauthorized information is found, an alarm is issued to the computer user.

[0073] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A computer network security detection system, comprising a virtual verification system (1), characterized in that: The virtual verification system (1) is connected to the secondary loading unit (2). The virtual verification system (1) is used to provide a temporary installation space for the APP to be loaded, control the APP to be loaded to load and run the APP after authorization, and verify the corresponding permissions of the information obtained by the APP after virtual sensitive information simulation, so as to realize the security detection of the APP. The virtual verification system (1) includes a permission classification unit (3), a classification storage unit (4) and a simulation loading unit (5). The permission classification unit (3) is used to classify the false simulated sensitive information and non-sensitive information according to the permission type from the false simulated information on the network or randomly edited. The permission classification unit (3) and the classification storage unit (4) are connected to the virtual loading unit (5). 4) docking, the classification storage unit (4) is used to randomly shuffle the classified sensitive information and then perform secondary simulation, and store the corresponding sensitive information and non-sensitive information according to the chat scene and the web browsing scene, the classification storage unit (4) is docked with the simulation loading unit (5), the simulation loading unit (5) is used to control the APP to be loaded to obtain the set authorization and then load and run the APP, after performing virtual sensitive information simulation, verify the corresponding authority of the information obtained by the APP, the simulation loading unit (5) is docked with the secondary loading unit (2), and is used to load the APP that has passed the verification by the simulation loading unit (5), and after the APP is loaded, the acquired information is backed up and the corresponding authority verification is performed; The simulated loading unit (5) comprises an authority setting module (13), a simulated operation module (14), an authority verification module (15) and an abnormal alarm module (16); the authority setting module (13) is connected to the simulated operation module (14), the simulated operation module (14) is connected to the authority verification module (15), and the authority verification module (15) is connected to the abnormal alarm module (16); The permission setting module (13) is used to authorize and set the permissions of the APP to be loaded, and then install the APP to be loaded into the virtual verification system (1); The simulation operation module (14) is used to open the APP for operation, and control the screening and writing module (10) to obtain sensitive information, and control the corresponding sensitive information to operate in a corresponding scenario; The permission verification module (15) is used to monitor and verify sensitive information obtained during the operation of the APP. When sensitive information that does not correspond to the permission set in the permission setting module (13) is not detected, a security signal is sent to the secondary loading unit (2). When sensitive information that does not correspond to the permission set in the permission setting module (13) is detected, an abnormal mark is made and the corresponding sensitive information is transmitted to the abnormal alarm module (16); The abnormal alarm module (16) is used to receive sensitive information with abnormal marks sent by the authority verification module (15) and send an alarm to the computer user.

2. A computer network security detection system according to claim 1, characterized in that: The permission classification unit (3) comprises a network database (6), a sensitive classification module (7) and a desensitizing classification module (8), and the network database (6) is connected to the sensitive classification module (7) and the desensitizing classification module (8) respectively.

3. A computer network security detection system according to claim 2, characterized in that: The network database (6) is used to edit and store false chat language, pictures and network browsing information from the cloud or randomly; The sensitive classification module (7) is used to filter out sensitive information from the network database (6), classify the sensitive information according to the authority classification, and synchronize the classified sensitive information to the classification storage unit (4); The desensitizing classification module (8) is used to filter out non-sensitive information from the network database (6), classify the non-sensitive information according to the nature of the information, and directly synchronize the classified non-sensitive information to the classification storage unit (4).

4. A computer network security detection system according to claim 1, characterized in that: The classification storage unit (4) comprises a sensitive information simulation module (9), a screening and writing module (10), a chat simulation storage module (11) and a browsing simulation storage module (12); the sensitive information simulation module (9) is connected to the screening and writing module (10), and the screening and writing module (10) is connected to the chat simulation storage module (11) and the browsing simulation storage module (12), respectively.

5. A computer network security detection system according to claim 4, characterized in that: The sensitive information simulation module (9) is used to randomly shuffle the sensitive information classified in the permission classification unit (3) and then perform secondary simulation; The screening and writing module (10) is used to screen out sensitive information that is adapted to the chat scene from the sensitive information simulation module (9) and transmit it to the chat simulation storage module (11), and to screen out sensitive information that is adapted to the web browsing scene from the sensitive information simulation module (9) and transmit it to the browsing simulation storage module (12); The chat simulation storage module (11) is used to receive and store sensitive information corresponding to the chat scene synchronized by the screening and writing module (10); The browsing simulation storage module (12) is used to receive and store sensitive information corresponding to the web browsing scene synchronized by the screening and writing module (10).

6. A computer network security detection system according to claim 1, characterized in that: The secondary loading unit (2) comprises a normal loading module (17), an information backup module (18) and a secondary verification module (19); the normal loading module (17) is connected to the information backup module (18), and the information backup module (18) is connected to the authority verification module (15).

7. A computer network security detection system according to claim 6, characterized in that: The normal loading module (17) is used to load the APP after receiving the safety signal sent by the simulated loading unit (5); The information backup module (18) is used to back up the information acquired by the loaded APP; The secondary verification module (19) is used to verify the relevant authority of the information in the information backup module (18), and to send an alarm to the computer user when unauthorized information is found.

8. A computer network security detection method, characterized in that: The specific steps include: Step 1, authority classification: the network database (6) edits false chat language, pictures and network browsing information from the cloud or randomly, and stores them; the sensitive classification module (7) selects sensitive information from the network database (6), and classifies the sensitive information according to the authority classification, and synchronizes the classified sensitive information to the classification storage unit (4); the desensitization classification module (8) selects non-sensitive information from the network database (6), and classifies the non-sensitive information according to the nature of the information, and directly synchronizes the classified non-sensitive information to the classification storage unit (4); Step 2, classified storage: the sensitive information simulation module (9) randomly shuffles the sensitive information classified in the permission classification unit (3) and then performs secondary simulation; the screening and writing module (10) screens out sensitive information adapted to the chat scene from the sensitive information simulation module (9) and transmits it to the chat simulation storage module (11); and screens out sensitive information adapted to the web browsing scene from the sensitive information simulation module (9) and transmits it to the browsing simulation storage module (12); the chat simulation storage module (11) receives the sensitive information corresponding to the chat scene synchronized by the screening and writing module (10) and stores it; the browsing simulation storage module (12) receives the sensitive information corresponding to the web browsing scene synchronized by the screening and writing module (10) and stores it; Step 3, simulated loading: after the permission setting module (13) authorizes and sets the permission of the APP to be loaded, the APP to be loaded is installed in the virtual verification system (1), the simulated operation module (14) is used to open the APP for operation, and control the screening and writing module (10) to obtain sensitive information, and manipulate the corresponding sensitive information to operate in the corresponding scenario, the permission verification module (15) monitors and verifies the sensitive information obtained during the operation of the APP, and when sensitive information that does not correspond to the permission set in the permission setting module (13) is not detected, a security signal is sent to step 4, and when sensitive information that does not correspond to the permission set in the permission setting module (13) is detected, after abnormal marking, the corresponding sensitive information is transmitted to the abnormal alarm module (16), and the abnormal alarm module (16) receives the sensitive information with abnormal marking sent by the permission verification module (15) and sends an alarm to the computer user; Step 4, secondary loading: After receiving the security signal sent in step 3, the normal loading module (17) loads the APP, and the information backup module (18) backs up the information obtained by the loaded APP. The secondary verification module (19) is used to verify the relevant permissions of the information in the information backup module (18). When unauthorized information is found, an alarm is issued to the computer user.

Images