Industrial internet platform security test method

Abstract

The invention provides an industrial internet platform security test method, which comprises the following steps of: selecting a Web security vulnerability scanning tool and an edge node equipment security vulnerability scanning tool which are suitable for an industrial internet platform, and configuring scanning parameters and a network environment; executing Web security vulnerability scanning, performing comprehensive scanning on the target website, and identifying existing security vulnerabilities; executing edge node equipment security vulnerability scanning, sending a detection data packet to target edge node equipment, and identifying potential vulnerabilities; analyzing results of Web security vulnerability scanning and edge node equipment security vulnerability scanning, and manually verifying authenticity and availability of discovered vulnerabilities; source codes of the industrial internet platform are obtained, a source code component analysis tool is selected, and fingerprints of tested items are generated and uploaded to a scanning tool; executing source code component analysis, identifying a third-party component in the code, and verifying license compatibility of the component; and generating a security test report containing Web security vulnerabilities, edge node equipment vulnerabilities and source code component analysis results, and proposing corresponding repair suggestions.

Description

Technical Field

[0001] The present invention relates to the field of information technology, and in particular to a security testing method for an industrial Internet platform. Background Art

[0002] When conducting security testing on the industrial Internet platform of a large petrochemical enterprise, a thorny problem was discovered. The platform adopts a multi-layer distributed architecture, including hundreds of edge node device nodes, distributed in production bases across the country. When performing vulnerability scans on edge node devices, due to network latency and firewall restrictions, many detection data packets cannot reach the target host or receive responses, resulting in incomplete scan results. At the same time, the platform's Web application adopts a complex microservice architecture and uses a large number of self-developed components. Traditional Web security vulnerability scanning tools are difficult to effectively identify potential vulnerabilities in these components. When conducting source code component analysis, it was found that the platform used some closed-source industrial software components, and its source code could not be obtained for analysis, and there was a lack of relevant vulnerability information libraries. These factors lead to insufficient coverage of security testing, which may miss some important security risks. How to design a more effective security testing solution in this complex industrial Internet environment to comprehensively evaluate the security status of the platform has become a technical problem that needs to be solved urgently. Summary of the invention

[0003] The present invention provides an industrial Internet platform security testing method, which mainly includes:

[0004] Obtain the website address, IP information, and edge node device information of the industrial Internet platform, and determine the test scope of Web security vulnerability scanning and edge node device security vulnerability scanning;

[0005] Select the web security vulnerability scanning tool and edge node device security vulnerability scanning tool suitable for the industrial Internet platform, and configure the scanning parameters and network environment;

[0006] Perform web security vulnerability scanning to comprehensively scan the target website and identify existing security vulnerabilities;

[0007] Perform security vulnerability scans on edge node devices, send detection packets to target edge node devices, and identify potential vulnerabilities;

[0008] Analyze the results of web security vulnerability scanning and edge node device security vulnerability scanning, and manually verify the authenticity and exploitability of the discovered vulnerabilities;

[0009] Obtain the source code of the industrial Internet platform, select the source code component analysis tool, generate the fingerprint of the project under test and upload it to the scanning tool;

[0010] Perform source code composition analysis to identify third-party components in the code and verify license compatibility of components;

[0011] Generate a security test report containing Web security vulnerabilities, edge node device vulnerabilities, and source code component analysis results, and put forward corresponding repair suggestions.

[0012] The technical solution provided by the embodiment of the present invention may have the following beneficial effects:

[0013] The present invention discloses a security testing method for an industrial Internet platform. The method first obtains the website and edge node device information of the platform, determines the test scope, and selects applicable Web and edge node device security vulnerability scanning tools. Then, Web security vulnerability scanning and edge node device security vulnerability scanning are performed to identify existing security vulnerabilities. At the same time, the platform source code is obtained, component analysis is performed, third-party components are identified, and license compatibility is verified. Finally, the present invention comprehensively analyzes the results of Web security vulnerabilities, edge node device vulnerabilities, and source code component analysis, generates a comprehensive security testing report, and proposes targeted repair suggestions. This multi-dimensional, all-round security testing method can well solve the problem of the current lack of systematic security testing methods in the industry, and can comprehensively evaluate the security status of the industrial Internet platform, effectively identify potential risks, and provide important support for the safe operation of the platform. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] Figure 1 This is a flow chart of an industrial Internet platform security testing method of the present invention.

[0015] Figure 2 It is a schematic diagram of an industrial Internet platform security testing method of the present invention.

[0016] Figure 3 This is another schematic diagram of an industrial Internet platform security testing method of the present invention. DETAILED DESCRIPTION

[0017] In order to make the purpose, technical solutions and advantages of the present invention more clear, the present invention is described in detail below with reference to the accompanying drawings and specific embodiments.

[0018] like Figure 1-3 In this embodiment, a method for industrial Internet platform security testing may specifically include:

[0019] S101. Obtain the website address, IP information and edge node device information of the industrial Internet platform, and determine the test scope of Web security vulnerability scanning and edge node device security vulnerability scanning. Among them, Web security vulnerability scanning is mainly aimed at application security, edge node device security vulnerability scanning is mainly aimed at edge device security, and source code component analysis is mainly used to identify the security of third-party components at all levels of the platform.

[0020] Specifically, according to the domain name information of the industrial Internet platform, obtain the IP address of its website through DNS resolution. Use port scanning tools to scan the obtained IP address to obtain the open port information. According to the open port information, determine the type and version of the Web server used by the website. Use fingerprint recognition technology to obtain the development language, framework, middleware and other information used by the website. According to the URL of the website, use crawler technology to traverse and obtain the page URL information of the website. Analyze the obtained URL to determine the target URL range of the Web security vulnerability scan. According to the IP address of the edge node device, obtain the device type, version and other information of the host through industrial control protocols such as Modbus and OPC. Use industrial control equipment scanning tools such as Nmap to scan and determine the specific ports opened by the edge node device. According to the device type and open port information of the edge node device, determine the target range of the edge node device security vulnerability scan

[0021] Exemplary.

[0022] S102. Select a Web security vulnerability scanning tool and an edge node device security vulnerability scanning tool suitable for the industrial Internet platform, and configure scanning parameters and network environment.

[0023] According to the characteristics and requirements of the industrial Internet platform, select tools suitable for Web security vulnerability scanning, such as Acunet ix, Nessus, etc., and tools suitable for edge node device security vulnerability scanning, such as Nmap, OpenVAS, etc. By analyzing the network architecture and composition of the industrial Internet platform, determine the target system and host that need to be scanned for vulnerabilities, and obtain their network parameter information such as IP address, port, protocol, etc. Use network packet capture tools such as Wi reshark to monitor the traffic of the target system, determine its open network services and communication protocols, and obtain potential vulnerability attack surfaces. In an isolated test environment, configure the scanning strategy of the vulnerability scanning tool according to the type and characteristics of the edge node device, and set the scanning parameters such as depth, breadth, and rate. If the target is a Web application system, use the Web security vulnerability scanning tool to scan it comprehensively, focusing on common Web security vulnerabilities such as SQL injection, XSS, and file inclusion; if the target is an edge node device, use the edge node device security vulnerability scanning tool for customized scanning, focusing on vulnerabilities unique to PLC, HMI, RTU, etc. During the scanning process, the running status of the scanning tool and changes in network traffic are monitored in real time. If abnormal traffic or system response delays are found, the scanning rate and intensity are adjusted in time to avoid a major impact on the target system. After the scan is completed, the scanning results are summarized and analyzed to identify various existing security vulnerabilities and obtain detailed information such as the type, hazard level, and cause of the vulnerability. According to the actual situation of the vulnerability, the authenticity and exploitability of the vulnerability are further verified through vulnerability exploitation tools to determine the actual risk of the vulnerability to the system. Combined with the results of vulnerability scanning and verification, a complete vulnerability analysis report is formed, and targeted vulnerability repair and protection suggestions are put forward, such as closing non-essential ports, updating patches, strengthening configurations, etc., for subsequent rectification.

[0024] Exemplary.

[0025] S103, executing a web security vulnerability scan, performing a comprehensive scan on the target website, and identifying existing security vulnerabilities.

[0026] According to the URL and IP information of the target website, the website's domain name, subdomain name, IP address and other basic information are obtained through network scanning tools, and the authenticity and validity of this information are verified. Web fingerprint recognition technology is used to analyze the website's HTTP response header, web page content and other features to determine the type of web server, version number, development language, framework and other information used by the website. According to the website's business functions and URL structure, crawler tools are used to automatically traverse the website's links, obtain the website's page URL list, and extract the form, parameters and other information in the page by parsing the page content. According to the known Web security vulnerability feature library, a rule-based matching method is used to perform security detection on the website's URL, parameters, Cookie, etc. to determine whether there are common Web security vulnerabilities such as SQL injection, XSS cross-site scripting, and CSRF cross-site request forgery. If a suspected vulnerability is detected in the previous step, a targeted Payload is automatically constructed and sent according to the vulnerability type, and the authenticity and exploitability of the vulnerability are further verified by analyzing the website's response content. If the website has a file upload function, a specially constructed file is uploaded and the uploaded file path is accessed to detect whether there is a file upload vulnerability and obtain the website's file system path information. According to the framework and middleware used by the website, the corresponding known vulnerability information is obtained from the vulnerability library, and by sending customized requests, the website is tested for security risks caused by these known vulnerabilities. By using the Web security vulnerability mining technology based on intelligent algorithms, abnormal test cases are automatically generated by learning the normal request and response patterns of the website, and potential logical vulnerabilities and business security risks of the website are discovered. The various types of Web security vulnerability information discovered during the scanning process are summarized and classified, and a website security test report is generated based on the severity and impact of the vulnerability, and corresponding vulnerability repair suggestions and solutions are given.

[0027] Exemplary.

[0028] S104: Perform security vulnerability scanning of edge node devices, send detection data packets to target edge node devices, and identify potential vulnerabilities.

[0029] Connect the host to be tested to the test machine through a wired connection and configure a wired LAN. Then, based on the IP address, port and other information of the edge node device, construct a detection data packet using the TCP / IP protocol, and send the constructed detection data packet to the target edge node device through the network. Listen to and receive the detection data packet on the target edge node device. Parse the received detection data packet and extract the request information contained therein. Based on the request information, simulate the request operation on the edge node device and obtain the response data of the request. Analyze the response data to determine whether it contains abnormal or sensitive information. If it does, it indicates that there may be a vulnerability. Based on the analysis results, determine the suspected vulnerability points and generate a potential vulnerability list. By querying the vulnerability library, obtain detailed information on potential vulnerabilities, including vulnerability descriptions, hazard levels, etc. Combined with the actual situation of the edge node device, screen out high-risk vulnerabilities that need to be focused on to form a final vulnerability scan result report.

[0030] Exemplary.

[0031] S105. Analyze the results of the Web security vulnerability scan and the edge node device security vulnerability scan, and manually verify the authenticity and exploitability of the discovered vulnerabilities.

[0032] According to the results of the web security vulnerability scan and the edge node device security vulnerability scan, obtain the list of discovered vulnerabilities and their detailed information, including vulnerability description, impact scope, and exploitation method. Use the vulnerability risk assessment method to conduct risk assessment on each vulnerability in the vulnerability list and obtain the risk level of the vulnerability. According to the risk level of the vulnerability, determine the verification priority of the vulnerability. The higher the risk level, the higher the priority of the vulnerability. By building a test environment that is the same or similar to the target system, simulate the real network topology and system configuration to provide a basis for vulnerability verification. According to the exploitation method of the vulnerability, try to reproduce and exploit high-priority vulnerabilities in the test environment to determine whether the vulnerability really exists. If the vulnerability can be successfully exploited, the sensitive information of the target system or the system control authority is obtained through the vulnerability exploitation to further determine the harmfulness of the vulnerability. If the vulnerability cannot be directly exploited, analyze the cause of the vulnerability, identify the prerequisites for the exploitation of the vulnerability, and try to bypass the restrictions to exploit the vulnerability by constructing a specific exploitation environment and exploitation code. According to the results of the vulnerability verification, update the information of the vulnerability list, mark the verified vulnerability as truly exploitable or unexploitable, and update the detailed description of the vulnerability. For vulnerabilities that have been confirmed to be truly exploitable, develop corresponding repair plans and emergency plans based on their severity and scope of impact, and notify relevant personnel to carry out timely repairs and prevention.

[0033] Exemplary.

[0034] S106. Obtain the source code of the industrial Internet platform, select a source code component analysis tool, generate a fingerprint of the project under test, and upload it to the scanning tool.

[0035] Get the source code of the Industrial Internet Platform. Access the enterprise's version control system, such as Git or SVN, and extract the specified project, branch, module, or file. Select a source code component analysis tool. Filter analysis tools that support these technology stacks based on the language, framework, and dependency management method of the source code. Pre-conditions to verify the consistency of the code with the product. Ensure that the code is up to date and runnable by compiling the source code and running basic functional tests. Generate a fingerprint of the project under test through the tool. Scan the source code using the source code component analysis tool to generate a unique identifier or fingerprint of the code. Upload to the scanning tool. Upload the generated project fingerprint to the analysis tool's server via the network for in-depth component analysis. Configure the analysis tool. Adjust the analysis tool's scanning parameters, such as scan depth, exclusion directories, or custom rules, based on project settings and requirements. Perform an automatic scan. Start the analysis tool to automatically scan the source code, identify third-party components, and match them with known components in the database. Generate a detailed report. The analysis tool processes the scan data and generates a detailed report containing a list of components, version information, dependencies, known vulnerabilities, and license status. Display the analysis results. The results of source code component analysis are displayed through visual means such as icons or graphics, making them easier to understand and operate.

[0036] Exemplary.

[0037] S107. Perform source code component analysis, identify third-party components in the code, and verify the license compatibility of the components.

[0038] According to the project requirements, determine the scope of the source code that needs to be analyzed, including project name, version, branch and other information. Use the source code scanning tool to scan the source code to obtain the file list and file content of the source code. By analyzing the file list and file content of the source code, identify the programming language and build tool used in the source code. According to the identified programming language and build tool, select an adapted source code component analysis tool. Input the file list and file content of the source code into the selected source code component analysis tool for analysis. The source code component analysis tool identifies the open source components and their version information contained in the source code by comparing with the known open source component feature library. Obtain the license information of the identified open source components, compare it with the project license requirements, and determine whether there is any license incompatibility. If there is a license incompatibility, output the specific information of the license incompatibility, including component name, version, license type, etc., indicating that further processing is required. Based on the results of the source code component analysis, generate a source code component analysis report, including the list of open source components used, versions, license information, and potential license incompatibility risks, etc., to provide a basis for subsequent source code management.

[0039] Exemplary.

[0040] S108. Generate a security test report including Web security vulnerabilities, edge node device vulnerabilities and source code component analysis results, and put forward corresponding repair suggestions.

[0041] According to the results of Web security vulnerability scanning, edge node device security vulnerability scanning and source code component analysis, the discovered vulnerabilities and their detailed information are obtained, including vulnerability description, impact scope, and exploitation method. The vulnerability assessment algorithm is used to calculate the risk score of each vulnerability based on factors such as the severity of the vulnerability, the impact scope, and the difficulty of exploitation, and obtain the priority ranking of the vulnerabilities. If the vulnerability score exceeds the preset high-risk threshold, the vulnerability is determined to be a high-risk vulnerability and included in the key repair recommendations; if the score is lower than the threshold but higher than the low-risk threshold, it is determined to be a medium-risk vulnerability and included in the general repair recommendations. According to the system component where the vulnerability is located, the general repair solution for the vulnerability type is matched from the vulnerability knowledge base and made into a priority ranking. Based on the repair suggestions, the general repair plan is customized and adjusted in combination with the actual architecture and operating environment of the target system to obtain targeted and detailed repair steps. Through asset importance assessment, the business value of different assets is determined, and higher repair priority is given to vulnerabilities related to high-value assets. Vulnerability details, risk analysis, and repair suggestions are summarized into a security test report, and sorted by severity and priority. Data visualization technology is used to generate intuitive charts such as vulnerability distribution maps, high, medium and low risk ratio maps, and insert security test reports. Through interface integration with the business system, the security test report is pushed to the asset manager, and the work order process is triggered to track the progress of vulnerability repairs to ensure that rectification is completed as planned.

[0042] Exemplary.

[0043] The above describes the specific embodiments of the present invention. It should be understood that the present invention is not limited to the above specific embodiments, and those skilled in the art can make various changes or modifications within the scope of the claims, which does not affect the essence of the present invention. In the absence of conflict, the embodiments of the present application and the features in the embodiments can be combined with each other arbitrarily.

Claims

1. A method for security testing of an industrial Internet platform, characterized in that: The method comprises: Obtain the website address, IP information, and edge node device information of the industrial Internet platform, and determine the test scope of Web security vulnerability scanning and edge node device security vulnerability scanning; Select the web security vulnerability scanning tool and edge node device security vulnerability scanning tool suitable for the industrial Internet platform, and configure the scanning parameters and network environment; Perform web security vulnerability scanning to comprehensively scan the target website and identify existing security vulnerabilities; Perform security vulnerability scans on edge node devices, send detection packets to target edge node devices, and identify potential vulnerabilities; Analyze the results of web security vulnerability scanning and edge node device security vulnerability scanning, and manually verify the authenticity and exploitability of the discovered vulnerabilities; Obtain the source code of the industrial Internet platform, select the source code component analysis tool, generate the fingerprint of the project under test and upload it to the scanning tool; Perform source code composition analysis to identify third-party components in the code and verify license compatibility of components; Generate a security test report containing Web security vulnerabilities, edge node device vulnerabilities, and source code component analysis results, and put forward corresponding repair suggestions.

2. The method according to claim 1, characterized in that The obtaining of the website address, IP information and edge node device information of the industrial Internet platform and determining the test scope of the web security vulnerability scan and the edge node device security vulnerability scan include: According to the domain name information of the industrial Internet platform, obtain the IP address of its website through DNS resolution. Use the port scanning tool to scan the obtained IP address to obtain the open port information. According to the open port information, determine the type and version of the Web server used by the website; According to the URL of the website, crawler technology is used to traverse and obtain the page URL information of the website, analyze the obtained URL, and determine the target URL range of the Web security vulnerability scan based on the IP address of the edge node device; Obtain the device type and version of the host through industrial control protocols such as Modbus and OPC; Use industrial control equipment scanning tools to scan and determine the specific ports open on edge node devices. Based on the device type and open port information of the edge node devices, determine the target range of the edge node device security vulnerability scan.

3. The method according to claim 1, characterized in that The selection of a Web security vulnerability scanning tool and an edge node device security vulnerability scanning tool suitable for the industrial Internet platform, and configuration of scanning parameters and network environment include: According to the characteristics and requirements of the industrial Internet platform, select tools suitable for web security vulnerability scanning and tools suitable for edge node device security vulnerability scanning; By analyzing the network architecture and composition of the industrial Internet platform, we can determine the target systems and hosts that need to be scanned for vulnerabilities and obtain their network parameter information; Use network packet capture tools to monitor the traffic of the target system, determine its open network services and communication protocols, and obtain potential vulnerability attack surfaces; In an isolated test environment, configure the scanning strategy of the vulnerability scanning tool according to the type and characteristics of the edge node device, and set the depth, breadth, and rate of the scan; If the target is a Web application system, use a Web security vulnerability scanning tool to perform a comprehensive scan on it, focusing on Web security vulnerabilities; If the target is an edge node device, a customized scan is performed using an edge node device security vulnerability scanning tool, focusing on device-specific vulnerabilities; During the scanning process, the running status of the scanning tool and changes in network traffic are monitored in real time. If abnormal traffic or system response delay is found, the scanning rate and intensity are adjusted in time to avoid affecting the target system; After the scan is completed, the scan results are summarized and analyzed to identify various existing security vulnerabilities and obtain detailed information on the vulnerabilities; According to the actual situation of the vulnerability, further verify the authenticity and exploitability of the vulnerability through vulnerability exploitation tools to determine the actual risk of the vulnerability to the system; Combining the results of vulnerability scanning and verification, a complete vulnerability analysis report is formed, and targeted vulnerability repair and protection suggestions are put forward for subsequent rectification.

4. The method according to claim 1, characterized in that The web security vulnerability scan is performed to comprehensively scan the target website and identify the existing security vulnerabilities, including: Based on the URL and IP information of the target website, obtain the basic information of the website through network scanning tools, and verify the authenticity and validity of the information; By analyzing the characteristics of the website, determine the type of web server, version number, development language and framework used by the website; According to the business functions and URL structure of the website, use crawler tools to automatically traverse the links of the website, obtain the page URL list of the website, and extract the forms and parameters in the page by parsing the page content; Based on the known Web security vulnerability feature library, a rule-based matching method is used to perform security checks on websites to determine whether there are Web security vulnerabilities. If a suspected vulnerability is detected in the previous step, a targeted Payload is automatically constructed and sent according to the vulnerability type, and the authenticity and exploitability of the vulnerability are verified by analyzing the response content of the website; If the website has a file upload function, it will detect whether there is a file upload vulnerability by uploading a specially constructed file and accessing the uploaded file path to obtain the file system path information of the website; According to the framework and middleware used by the website, the corresponding known vulnerability information is obtained from the vulnerability library, and customized requests are sent to detect whether the website has security risks of these known vulnerabilities; By learning the normal request and response patterns of the website, abnormal test cases are automatically generated to discover potential logical vulnerabilities and business security risks of the website; Summarize and classify the various types of Web security vulnerability information found during the scanning process, generate a website security test report based on the severity and impact of the vulnerability, and provide corresponding vulnerability repair suggestions and solutions.

5. The method according to claim 1, characterized in that The execution of edge node device security vulnerability scanning, sending a detection data packet to the target edge node device, and identifying potential vulnerabilities includes: According to the IP address and port information of the edge node device, a detection data packet is constructed using the TCP / IP protocol, and the constructed detection data packet is sent to the target edge node device through the network. The target edge node device listens on the target edge node device and receives the detection data packet. The received detection data packet is parsed to extract the request information contained therein. According to the request information, the request operation is simulated on the edge node device to obtain the response data of the request. The response data is analyzed to determine whether it contains abnormal or sensitive information. If it does, it indicates that there may be a vulnerability. Based on the analysis results, the suspected vulnerability points are determined and a potential vulnerability list is generated. By querying the vulnerability library, detailed information on potential vulnerabilities is obtained, including vulnerability descriptions and hazard levels. Combined with the actual situation of the edge node device, high-risk vulnerabilities that need to be focused on are screened out to form a final vulnerability scan result report.

6. The method according to claim 1, characterized in that The analysis of the results of the Web security vulnerability scan and the edge node device security vulnerability scan, and the manual verification of the authenticity and exploitability of the discovered vulnerabilities, include: Based on the results of web security vulnerability scanning and edge node device security vulnerability scanning, obtain a list of discovered vulnerabilities and their detailed information, including vulnerability description, impact scope, and exploitation methods; Use vulnerability risk assessment methods to conduct risk assessment on each vulnerability in the vulnerability list to obtain the risk level of the vulnerability; Determine the vulnerability verification priority based on the vulnerability risk level. The higher the risk level, the higher the priority of the vulnerability. By building a test environment that is the same or similar to the target system, the real network topology and system configuration are simulated to provide a basis for vulnerability verification; According to the vulnerability exploitation method, try to reproduce and exploit high-priority vulnerabilities in the test environment to determine whether the vulnerabilities really exist; If the vulnerability can be successfully exploited, sensitive information of the target system or system control authority can be obtained through the vulnerability exploitation to further determine the harmfulness of the vulnerability; If the vulnerability cannot be directly exploited, analyze the cause of the vulnerability, identify the prerequisites for exploiting the vulnerability, and try to bypass the restrictions and exploit the vulnerability by constructing a specific exploit environment and exploit code; According to the results of vulnerability verification, update the information in the vulnerability list, mark the verified vulnerabilities as truly exploitable or unexploitable, and update the detailed description of the vulnerabilities; For vulnerabilities that have been confirmed to be truly exploitable, develop corresponding repair plans and emergency plans based on their severity and scope of impact, and notify relevant personnel to carry out timely repairs and prevention.

7. The method according to claim 1, characterized in that The method of obtaining the source code of the industrial Internet platform, selecting a source code component analysis tool, generating a fingerprint of the project under test and uploading it to a scanning tool includes: Get the source code of the Industrial Internet Platform; By accessing the enterprise's version control system, extract the specified project, branch, module or file; Select source code composition analysis tools; Filter out analysis tools that support the technology stack based on the source code language, framework, and dependency management method; Pre-conditions to verify the consistency between code and product; Ensure the code is up to date and operational by compiling the source code and running basic functional tests; Generate the fingerprint of the project under test through the tool; Use source code composition analysis tools to scan the source code and generate a unique identifier or fingerprint of the code; Upload to the scanning tool; Upload the generated project fingerprint to the server of the analysis tool via the network for in-depth component analysis; Configuration analysis tools; Adjust the analysis tool's scanning parameters, such as scanning depth and exclusion directories or custom rules, according to project settings and requirements; Perform automatic scans; Launch the analysis tool to automatically scan the source code, identify third-party components, and match them with known components in the database; Generate detailed reports; Analysis tools process scan data and generate detailed reports containing component lists, version information, dependencies, known vulnerabilities, and license status; Present the results of the analysis; The results of source code component analysis are displayed through visual means such as icons or graphics, making them easier to understand and operate.

8. The method according to claim 1, characterized in that The performing of source code component analysis, identifying third-party components in the code, and verifying the license compatibility of the components includes: According to project requirements, determine the scope of source code that needs to be analyzed, including project name, version, and branch; Use source code scanning tools to scan the source code and obtain the file list and file content of the source code; Identify the programming language and build tools used in the source code by analyzing the file list and file contents of the source code; According to the identified programming language and build tool, select an appropriate source code component analysis tool, input the file list and file content of the source code into the selected source code component analysis tool for analysis, and the source code component analysis tool identifies the open source components and their version information contained in the source code by comparing with the known open source component feature library. Obtain the license information of the identified open source components, compare it with the project license requirements, and determine whether there is a license incompatibility. If there is a license incompatibility, output the specific information of the license incompatibility, and prompt that further processing is needed. Based on the results of the source code component analysis, generate a source code component analysis report, including the list of open source components used, version and license information, and potential license incompatibility risks, to provide a basis for subsequent source code management.

9. The method according to claim 1, characterized in that: The security test report generated includes Web security vulnerabilities, edge node device vulnerabilities and source code component analysis results, and proposes corresponding repair suggestions, including: Based on the results of web security vulnerability scanning, edge node device security vulnerability scanning, and source code component analysis, obtain the discovered vulnerabilities and their detailed information, calculate the risk score of each vulnerability, and obtain the priority ranking of the vulnerabilities. If the vulnerability score exceeds the preset high-risk threshold, the vulnerability is determined to be a high-risk vulnerability and included in the key repair recommendations; If the score is lower than the threshold but higher than the low-risk threshold, it is determined to be a medium-risk vulnerability and included in the general repair recommendation. According to the system component where the vulnerability is located, the general repair solution for this vulnerability type is matched from the vulnerability knowledge base and used as the basis for the repair recommendation. Combined with the actual architecture and operating environment of the target system, the general repair solution is customized to obtain targeted detailed repair steps. Through asset importance assessment, the business value of different assets is determined, and higher repair priority is given to vulnerabilities related to high-value assets. Vulnerability details, risk analysis, and repair suggestions are summarized into a security test report, and sorted by severity and priority. Data visualization technology is used to generate intuitive charts such as vulnerability distribution maps and high, medium and low-risk ratio maps, and the security test report is inserted into the interface integration with the business system to push the security test report to the asset manager, trigger the work order process, track the progress of vulnerability repair, and ensure that the rectification is completed as planned.

Images