Vulnerability risk assessment monitoring system for network security

Abstract

The invention provides a vulnerability risk assessment monitoring system for network security, and relates to the field of network security. According to the method, a first vulnerability scanning channel is obtained, an abnormal feature coding training mechanism is set, and then a precise abnormal coding feature data set is obtained; performing vulnerability filtering on the target URL according to the accurate abnormal coding feature data set to obtain a skipping source; setting a second vulnerability scanning model, obtaining a target weighting coefficient corresponding to a skipping source, and further obtaining a potential target URL; pre-storing a permission database, performing permission limitation on the skipping source according to the permission database, and obtaining an authorized skipping source; a third transmission encryption model is set, a confirmation log is obtained according to the authorization jump source, a user confirmation mechanism is set, the confirmation log is confirmed according to the user confirmation mechanism, and an encryption jump user is obtained; monitoring the encrypted jump user to obtain abnormal jump data; and the abnormal jump data is managed.

Description

Technical Field

[0001] The present invention relates to the field of network security, and in particular to a vulnerability risk assessment and monitoring system for network security. Background Art

[0002] Network security vulnerabilities refer to defects or errors in the design, implementation, or use of system hardware and software security policies, which allow attackers to access or damage the system without authorization. Vulnerabilities can exist in hardware, software, and protocols, including but not limited to operating system vulnerabilities, application vulnerabilities, and network protocol vulnerabilities. These vulnerabilities may be caused by design defects, coding errors, improper configuration, or human factors in specific implementations, thus threatening the security of the system. In real life, due to network security vulnerabilities, there are information leakage, property fraud, account theft or other security risks when jumping between web pages and apps. Therefore, in order to solve the network security when jumping between web pages and apps, a vulnerability risk assessment and monitoring system for network security is provided. Summary of the invention

[0003] In order to solve the above technical problems, the present invention provides a vulnerability risk assessment and monitoring system for network security; The object of the present invention can be achieved by the following technical solutions: A vulnerability risk assessment monitoring system for network security, comprising a monitoring center, wherein the monitoring center is wirelessly connected to a vulnerability filtering module, a jump monitoring module, an encrypted transmission module, and a management module; The vulnerability filtering module is provided with a scanning channel unit and a target scanning unit; the scanning channel unit is used to obtain the first vulnerability scanning channel, set up an abnormal feature coding training mechanism, and then obtain an accurate abnormal coding feature data set; the target scanning unit is used to obtain a source to be redirected, and perform vulnerability filtering on the target URL corresponding to the source to be redirected according to the accurate abnormal coding feature data set to obtain a jumpable source; The jump monitoring module is provided with a potential anomaly unit and a jump permission unit. The potential anomaly unit is used to set a second vulnerability scanning model, obtain a target weight coefficient corresponding to a jumpable source, and then obtain a potential target URL; the jump permission unit is used to pre-store a permission database, restrict the permission of the jumpable source according to the permission database, and obtain an authorized jump source; The encrypted transmission module is used to set the third transmission encryption model, obtain the confirmation log according to the authorized jump source, and set the user confirmation mechanism, confirm the confirmation log according to the user confirmation mechanism, and obtain the encrypted jump user; The management module is provided with a target monitoring unit and an abnormal management unit. The target monitoring unit is used to monitor the encrypted jump users and obtain abnormal jump data; the abnormal management unit is used to manage the abnormal jump data.

[0004] Furthermore, the process of the scanning channel unit acquiring the first vulnerability scanning channel includes: Setting up several jump transmission channels, obtaining the jump request and the corresponding source to be jumped, connecting the jump request, the source to be jumped and the target scanning unit through the several jump transmission channels, and then obtaining the target URL corresponding to the source to be jumped; The structure data to be monitored and the corresponding feature identifiers corresponding to the target URL are obtained, and several structure data anomaly types and corresponding anomaly feature identifiers are obtained according to the structure data to be monitored. Several vulnerability scanning nodes are set in the jump transmission channel connecting the source to be jumped to the target scanning unit, and the structure data anomaly types and the corresponding anomaly feature identifiers are dispersedly stored in the vulnerability scanning nodes to generate a set of structure data anomaly type data nodes, and the vulnerability scanning nodes are connected in sequence to generate the first vulnerability scanning channel.

[0005] Furthermore, the process of acquiring the precise abnormal coding feature data set includes: An abnormal feature code converter is set in the first vulnerability scanning channel to convert the feature identifier to generate a feature code; then the abnormal feature code corresponding to the abnormal feature identifier is obtained and stored in the corresponding structure data abnormal type data node set to generate an abnormal feature code data set; The abnormal feature coding training mechanism is used to perform data training on the abnormal feature coding data set; set a number of abnormal target URLs corresponding to abnormal feature identifiers, and transmit them to the first vulnerability scanning channel for conversion through the abnormal feature coding converter to generate corresponding abnormal feature codes, and match them with the abnormal feature coding data set. If the match is unsuccessful, obtain the abnormal feature identifier corresponding to the abnormal feature code, and add the abnormal feature code to the abnormal feature coding data set corresponding to the corresponding abnormal feature identifier to generate an accurate abnormal feature coding feature data set; otherwise, do not do any processing; The structure data to be monitored includes communication protocol, IP address, server listening port, resource path, query parameter and fragment identifier; The structural data anomaly types include but are not limited to base anomalies, abnormal IP addresses, nested addresses, abnormal resource paths, symbol anomalies, etc.

[0006] Furthermore, the process of the target scanning unit acquiring the jumpable source includes: The target URL is transmitted to the first vulnerability scanning channel. Based on the abnormal feature encoding converter, the feature identifier corresponding to the target URL is obtained and converted into a feature code. The feature code is matched with the precise abnormal encoding feature data set. If the match is successful, the corresponding target URL is intercepted, and the vulnerability target URL is generated and sent to the management module; otherwise, the source to be jumped is generated into a jumpable source and sent to the jump monitoring module.

[0007] Furthermore, the process of the potential abnormal unit obtaining the potential target URL includes: The second vulnerability scanning model wirelessly connects to the first vulnerability scanning channel, obtains the feature code of the target URL corresponding to the jumpable source based on the abnormal feature code converter and records it as the target feature code, slices the target feature code to obtain a number of slice sub-feature codes; matches the several slice sub-feature codes with a number of precise abnormal code feature data sets, and if the match is successful, records the sub-feature code as a potential sub-feature code; otherwise, records the sub-feature code as a normal sub-feature code, and obtains the corresponding abnormal feature identifier and feature identifier; According to the feature identifier, the weight coefficients corresponding to the potential sub-feature encoding and the normal sub-feature encoding are set and marked as α respectively. q λ and β z λ , where λ represents the corresponding feature identifier, and then the target weighting coefficient k corresponding to the target feature code is obtained according to the weighting coefficient, that is, the formula is K = ∑ β z λ -∑ α q λ ; Set the target weight coefficient threshold K' and compare it with the target weight coefficient: If K<K', the feature code corresponding to the redirectable source is marked as a potential feature code, and the corresponding target URL is intercepted, and a potential target URL is generated and sent to the management module; If K ≥ K', the jumpable source is sent to the jump permission unit.

[0008] Furthermore, the process of the jump permission unit for obtaining the authorized jump source includes: Determine whether the target URL corresponding to the redirectable source exists in the authority database. If so, generate the authorized redirect source from the redirectable source and send it to the encrypted transmission module; Otherwise, an authorization request is sent to the management module.

[0009] Furthermore, the process of the encrypted transmission module acquiring the encrypted jump user includes: Get the jump request corresponding to the authorized jump source, click the jump request to get the jump user, and then get the jump user authorization function corresponding to the jump user and send it to the third transmission encryption model; The third transmission encryption model is provided with an automatic closing mechanism and is wirelessly connected to a function database, and obtains a jump user authorization function and compares it with the function database. If it exists in the function database, the corresponding jump user authorization function is automatically closed; otherwise, the jump user authorization function is sent to the jump user interface to generate a confirmation log; A user confirmation mechanism is provided in the jump user interface for receiving and confirming the confirmation log; The jump user receives the confirmation log according to the user confirmation mechanism and manually judges the jump user authorization function, manually selects the jump user authorization function that needs to be closed and confirms it. If the confirmation is successful, the encrypted jump user is obtained and the jump is performed.

[0010] Furthermore, the process of the target monitoring unit acquiring abnormal jump data includes: Send the jump user authorization function manually closed by the jump user through the user confirmation mechanism to the function database for storage; The jump user authorization function of the encrypted jump user during the jump process is obtained, and the abnormal jump data is obtained according to the function database and sent to the abnormal management unit.

[0011] Furthermore, the process of the abnormal management unit managing abnormal jump data includes: The abnormal management unit wirelessly connects the management terminal and the encryption jump user terminal; The exception management unit receives the vulnerability target URL, obtains the corresponding source to be redirected and sends it to the management terminal, receives the source to be redirected and prohibits the corresponding redirect request, and sends "abnormal request, automatically closed" to the encrypted redirect user terminal for display; The abnormal management unit receives the potential target URL, obtains the corresponding jump source and sends it to the management terminal, receives the jump source and reminds the corresponding jump request, and sends "abnormal request, it is recommended to close" to the encrypted jump user terminal for display; The exception management unit receives the vulnerability target URL, obtains the corresponding source to be redirected and sends it to the management terminal, receives the source to be redirected and prohibits the corresponding redirect request, and sends "abnormal request, automatically closed" to the encrypted redirect user terminal for display; The abnormal management unit receives the abnormal jump data and sends it to the encrypted jump user terminal for reminder, and asks whether to close the jump immediately.

[0012] Compared with the prior art, the present invention has the following beneficial effects: 1. By obtaining the first vulnerability scanning channel, the target URL corresponding to the source to be redirected is scanned for the first time through the first vulnerability scanning channel, and the vulnerable target URL is quickly intercepted, the interception speed is improved, and the security of the redirection is improved; 2. Set up a second vulnerability scanning model, obtain the feature code of the target URL corresponding to the redirectable source, and perform fragmentation processing to obtain the corresponding target weighting coefficient. Scan the potential vulnerabilities of the redirectable source according to the target weighting coefficient, and then obtain the potential target URL and intercept it. This can better perform further vulnerability scanning on the redirectable source, eliminate potential vulnerabilities, and prevent property and information loss due to omissions in the first vulnerability scanning channel. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the present invention. For ordinary technicians in this field, other drawings can also be obtained based on these drawings.

[0014] Figure 1 It is a schematic diagram of the present invention. DETAILED DESCRIPTION

[0015] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the present invention. For ordinary technicians in this field, other drawings can also be obtained based on these drawings.

[0016] like Figure 1 As shown, a vulnerability risk assessment monitoring system for network security includes a monitoring center, and the monitoring center is wirelessly connected to a vulnerability filtering module, a jump monitoring module, an encryption transmission module, and a management module; The vulnerability filtering module is provided with a scanning channel unit and a target scanning unit; the scanning channel unit is used to obtain the first vulnerability scanning channel, set up an abnormal feature coding training mechanism, and then obtain an accurate abnormal coding feature data set; the target scanning unit is used to obtain a source to be redirected, and perform vulnerability filtering on the target URL corresponding to the source to be redirected according to the accurate abnormal coding feature data set to obtain a jumpable source; The jump monitoring module is provided with a potential anomaly unit and a jump permission unit. The potential anomaly unit is used to set a second vulnerability scanning model, obtain a target weight coefficient corresponding to a jumpable source, and then obtain a potential target URL; the jump permission unit is used to pre-store a permission database, restrict the permission of the jumpable source according to the permission database, and obtain an authorized jump source; The encrypted transmission module is used to set the third transmission encryption model, obtain the jump user corresponding to the authorized jump source, and then obtain the confirmation log, and set the user confirmation mechanism, confirm the confirmation log according to the user confirmation mechanism, and obtain the encrypted jump user; The management module is provided with a target monitoring unit and an abnormal management unit, wherein the target monitoring unit is used to monitor the encrypted jump user and obtain abnormal jump data; the abnormal management unit is used to manage the abnormal jump data; The process of the scanning channel unit acquiring the first vulnerability scanning channel includes: Set up several jump transmission channels, obtain jump requests and corresponding sources to be jumped, connect the jump requests, the sources to be jumped and the target scanning unit through several jump transmission channels, receive the jump request, obtain the corresponding sources to be jumped through the jump transmission channels, and then obtain the target URL corresponding to the sources to be jumped; Obtain the structure data to be monitored and the corresponding feature identifier corresponding to the target URL, obtain several structure data anomaly types and corresponding anomaly feature identifiers according to the structure data to be monitored, set several vulnerability scanning nodes in the jump transmission channel connecting the source to be jumped to the target scanning unit, store the structure data anomaly types and the corresponding anomaly feature identifiers in the vulnerability scanning nodes in a dispersed manner, generate a structure data anomaly type data node set, and connect the vulnerability scanning nodes in sequence to generate a first vulnerability scanning channel; The process of obtaining the precise abnormal coding feature data set includes: An abnormal feature code converter is set in the first vulnerability scanning channel to convert the feature identifier to generate a feature code; then the abnormal feature code corresponding to the abnormal feature identifier is obtained and stored in the corresponding structure data abnormal type data node set to generate an abnormal feature code data set; The abnormal feature coding training mechanism is used to perform data training on the abnormal feature coding data set to obtain an accurate abnormal feature coding data set; Set several abnormal target URLs corresponding to abnormal feature identifiers, and transmit them to the first vulnerability scanning channel for conversion through the abnormal feature encoding converter to generate the corresponding abnormal feature code, and match it with the abnormal feature encoding data set. If the match is unsuccessful, obtain the abnormal feature identifier corresponding to the abnormal feature code, and add the abnormal feature code to the abnormal feature encoding data set corresponding to the corresponding abnormal feature identifier to generate an accurate abnormal code feature data set; otherwise, do nothing; It should be further explained that, in the specific implementation process, the jump request includes active request and passive request, which includes but is not limited to QR code scanning, advertisement jump, link, etc.; the source to be jumped includes but is not limited to web browsing, file downloading, video playing, etc.; the target URL corresponding to the source to be jumped is a uniform resource locator, which is an address identifier used to locate resources (such as web pages, pictures, videos, etc.) on the Internet, and the main function of the URL is to identify and locate resources on the Internet. Resources can be accessed and obtained according to the URL through a browser or other applications; it is the portal and access entry for information resources on the Internet, and is the basis for operations such as web browsing, file downloading, and video playing; therefore, converting the source to be jumped corresponding to the jump request into a unified target URL can better treat the jump source for vulnerability scanning; The structure data to be monitored includes communication protocol, IP address, server listening port, resource path, query parameter and fragment identifier; The structural data anomaly types include but are not limited to base anomalies, abnormal IP addresses, nested addresses, abnormal resource paths, symbol anomalies, etc.; It should be further explained that, in the specific implementation process, the target URL is usually expressed as scheme: / / host:port / path?query#fragment; wherein scheme represents the communication protocol; host represents the IP address; port represents the server listening port; path represents the resource path; query represents the query parameter; and fragment represents the fragment identifier; The process of the target scanning unit acquiring the jumpable source includes: The target URL is transmitted to the first vulnerability scanning channel. Based on the abnormal feature encoding converter, the feature identifier corresponding to the target URL is obtained and converted into a feature code. The feature code is matched with the precise abnormal encoding feature data set. If the match is successful, the corresponding target URL is intercepted, and the vulnerability target URL is generated and sent to the management module; otherwise, the source to be jumped is generated into a jumpable source and sent to the jump monitoring module; It should be further explained that, in the specific implementation process, by obtaining the first vulnerability scanning channel, the target URL corresponding to the source to be redirected is first scanned through the first vulnerability scanning channel, the vulnerable target URL is quickly intercepted, the interception speed is improved, and the security of the redirection is improved; The process of obtaining the target weight coefficient of the potential abnormal unit includes: The second vulnerability scanning model wirelessly connects to the first vulnerability scanning channel, obtains the feature code of the target URL corresponding to the jumpable source based on the abnormal feature code converter and records it as the target feature code, slices the target feature code, obtains several slice feature codes, matches the several slice feature codes with several precise abnormal code feature data sets, and if the match is successful, records the sub-feature code as a potential sub-feature code; otherwise, records the sub-feature code as a normal sub-feature code; and obtains the corresponding abnormal feature identifier and feature identifier; According to the feature identifier, the weight coefficients corresponding to the potential sub-feature encoding and the normal sub-feature encoding are set and marked as α respectively. q λ and β z λ , where λ represents the corresponding feature identifier; and then the target weighting coefficient k corresponding to the target feature code is obtained according to the weighting coefficient; That is, the formula for obtaining the target weight coefficient is: K = ∑ β z λ -∑ α q λ ; The process of obtaining the potential target URL includes: Set the target weight coefficient threshold K' and compare it with the target weight coefficient: If K<K', the feature code corresponding to the redirectable source is marked as a potential feature code, and the corresponding target URL is intercepted, and a potential target URL is generated and sent to the management module; If K ≥ K' , the jumpable source is sent to the jump permission unit; It should be further explained that, in the specific implementation process, a second vulnerability scanning model is set up to obtain the characteristic code of the target URL corresponding to the redirectable source, and perform sharding processing to obtain the corresponding target weighting coefficient. The potential vulnerabilities of the redirectable source are scanned according to the target weighting coefficient, and then the potential target URL is obtained and intercepted, which can better perform further vulnerability scanning on the redirectable source, cut off the potential vulnerabilities, and prevent property loss and information loss due to the vulnerabilities; The process of the jump permission unit for obtaining the authorized jump source includes: Determine whether the target URL corresponding to the redirectable source exists in the authority database. If so, generate the authorized redirect source from the redirectable source and send it to the encrypted transmission module; Otherwise, an authorization request is sent to the management module.

[0017] The process of the encrypted transmission module acquiring the encrypted jump user includes: Obtain the jump request corresponding to the authorized jump source, accept the jump request to obtain the jump user, and then obtain the jump user authorization function corresponding to the jump user and send it to the third transmission encryption model; The third transmission encryption model is provided with an automatic closing mechanism and is wirelessly connected to a function database, and obtains a jump user authorization function and compares it with the function database. If it exists in the function database, the corresponding jump user authorization function is automatically closed; otherwise, the jump user authorization function is sent to the jump user interface to generate a confirmation log; A user confirmation mechanism is provided in the jump user interface for receiving and confirming the confirmation log; The redirected user receives the confirmation log according to the user confirmation mechanism and manually determines the redirected user authorization function, manually selects the redirected user authorization function to be closed and confirms it. If the confirmation is successful, the encrypted redirected user is obtained and redirected; It should be further explained that, in the specific implementation process, in the prior art, when users jump between web pages or jump between APPs, they usually directly accept the jump request and enter the jump source. Only after entering the jump source will they be informed whether there is an abnormality, but usually at this time, private information and finances have been lost. Therefore, the jump source is scanned for vulnerabilities through the first vulnerability scan, the second vulnerability scan, and the third vulnerability scan. Only when it is determined to be an authorized jump source can the jump request be accepted, and the private information needs to be automatically and actively encrypted, which improves the security of the information; The process of the target monitoring unit acquiring abnormal jump data includes: Send the jump user authorization function manually closed by the jump user through the user confirmation mechanism to the function database for storage; Obtain the jump user authorization function of the encrypted jump user during the jump process, and determine whether there is a function database. If so, generate the corresponding jump user authorization function as abnormal jump data and send it to the abnormal management unit; The process of managing abnormal jump data by the abnormal management unit includes: The abnormal management unit wirelessly connects the management terminal and the encryption jump user terminal; The exception management unit receives the vulnerability target URL, obtains the corresponding source to be redirected and sends it to the management terminal, receives the source to be redirected and prohibits the corresponding redirect request, and sends "abnormal request, automatically closed" to the encrypted redirect user terminal for display; The abnormal management unit receives the potential target URL, obtains the corresponding jump source and sends it to the management terminal, receives the jump source and reminds the corresponding jump request, and sends "abnormal request, it is recommended to close" to the encrypted jump user terminal for display; The exception management unit receives the vulnerability target URL, obtains the corresponding source to be redirected and sends it to the management terminal, receives the source to be redirected and prohibits the corresponding redirect request, and sends "abnormal request, automatically closed" to the encrypted redirect user terminal for display; The abnormal management unit receives the abnormal jump data and sends it to the encrypted jump user terminal for reminder, and asks whether to close the jump immediately.

[0018] The features and exemplary embodiments of various aspects of the present application are described in detail above. In order to make the purpose, technical solutions and advantages of the present application clearer, the present application is further described in detail in combination with the drawings and specific embodiments. It should be understood that the specific embodiments described herein are only intended to explain the present application rather than to limit the present application. For those skilled in the art, the present application can be implemented without some of these specific details. The above description of the embodiments is merely to provide a better understanding of the present application by showing examples of the present application.

[0019] The above embodiments are only used to illustrate the technical method of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical method of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical method of the present invention.

Claims

1. A vulnerability risk assessment and monitoring system for network security, comprising a monitoring center, characterized in that: The monitoring center is wirelessly connected to a vulnerability filtering module, a jump monitoring module, an encryption transmission module and a management module; The vulnerability filtering module is provided with a scanning channel unit and a target scanning unit; the scanning channel unit is used to obtain the first vulnerability scanning channel, set up an abnormal feature coding training mechanism, and then obtain an accurate abnormal coding feature data set; the target scanning unit is used to obtain a source to be redirected, and perform vulnerability filtering on the target URL corresponding to the source to be redirected according to the accurate abnormal coding feature data set to obtain a jumpable source; The jump monitoring module is provided with a potential anomaly unit and a jump permission unit, wherein the potential anomaly unit is used to set a second vulnerability scanning model, obtain a target weight coefficient corresponding to a jumpable source, and then obtain a potential target URL; The jump permission unit is used to pre-store a permission database, perform permission restrictions on the jumpable source according to the permission database, and obtain the authorized jump source; The encrypted transmission module is used to set the third transmission encryption model, obtain the confirmation log according to the authorized jump source, and set the user confirmation mechanism, confirm the confirmation log according to the user confirmation mechanism, and obtain the encrypted jump user; The management module is provided with a target monitoring unit and an abnormal management unit, wherein the target monitoring unit is used to monitor the encrypted jump user and obtain abnormal jump data; The exception management unit is used to manage the abnormal jump data.

2. A vulnerability risk assessment and monitoring system for network security according to claim 1, characterized in that: The process of the scanning channel unit acquiring the first vulnerability scanning channel includes: Setting up several jump transmission channels, obtaining the jump request and the corresponding source to be jumped, connecting the jump request, the source to be jumped and the target scanning unit through the several jump transmission channels, and then obtaining the target URL corresponding to the source to be jumped; The structure data to be monitored and the corresponding feature identifiers corresponding to the target URL are obtained, and several structure data anomaly types and corresponding anomaly feature identifiers are obtained according to the structure data to be monitored. Several vulnerability scanning nodes are set in the jump transmission channel connecting the source to be jumped to the target scanning unit, and the structure data anomaly types and the corresponding anomaly feature identifiers are dispersedly stored in the vulnerability scanning nodes to generate a set of structure data anomaly type data nodes, and the vulnerability scanning nodes are connected in sequence to generate the first vulnerability scanning channel.

3. A vulnerability risk assessment and monitoring system for network security according to claim 2, characterized in that: The process of obtaining the precise abnormal coding feature data set includes: An abnormal feature code converter is set in the first vulnerability scanning channel to convert the feature identifier to generate a feature code; then the abnormal feature code corresponding to the abnormal feature identifier is obtained and stored in the corresponding structure data abnormal type data node set to generate an abnormal feature code data set; The abnormal feature coding training mechanism is used to perform data training on the abnormal feature coding data set; set a number of abnormal target URLs corresponding to abnormal feature identifiers, and transmit them to the first vulnerability scanning channel for conversion through the abnormal feature coding converter, generate corresponding abnormal feature codes, and match them with the abnormal feature coding data set, obtain the abnormal feature identifier corresponding to the abnormal feature code, and add the abnormal feature code to the abnormal feature coding data set corresponding to the corresponding abnormal feature identifier to generate an accurate abnormal feature coding feature data set.

4. A vulnerability risk assessment and monitoring system for network security according to claim 3, characterized in that: The process of the target scanning unit acquiring the jumpable source includes: The target URL is transmitted to the first vulnerability scanning channel. Based on the abnormal feature encoding converter, the feature identifier corresponding to the target URL is obtained and converted into a feature code. The feature code is matched with the precise abnormal encoding feature data set. If the match is successful, the corresponding target URL is intercepted, and the vulnerability target URL is generated and sent to the management module; otherwise, the source to be jumped is generated into a jumpable source and sent to the jump monitoring module.

5. A vulnerability risk assessment and monitoring system for network security according to claim 4, characterized in that: The process of the potential abnormal unit obtaining the potential target URL includes: The second vulnerability scanning model wirelessly connects to the first vulnerability scanning channel, obtains the feature code of the target URL corresponding to the jumpable source based on the abnormal feature code converter and records it as the target feature code, slices the target feature code to obtain a number of sub-feature codes; matches the sub-feature codes with a number of precise abnormal code feature data sets, obtains potential sub-feature codes and normal sub-feature codes corresponding to the sub-feature codes, and obtains corresponding feature identifiers; According to the feature identifier, the weight coefficients corresponding to the potential sub-feature encoding and the normal sub-feature encoding are set and marked as α q λ and β z λ , where λ represents the corresponding feature identifier, and then the target weighting coefficient k corresponding to the target feature code is obtained according to the weighting coefficient, that is, the formula is K = ∑ β z λ -∑ α q λ ; Set the target weight coefficient threshold K' and compare it with the target weight coefficient: If K<K', the feature code corresponding to the redirectable source is marked as a potential feature code, and the corresponding target URL is intercepted, and a potential target URL is generated and sent to the management module; If K ≥ K', the jumpable source is sent to the jump permission unit.

6. A vulnerability risk assessment and monitoring system for network security according to claim 5, characterized in that: The process of the jump permission unit for obtaining the authorized jump source includes: Determine whether the target URL corresponding to the redirectable source exists in the authority database. If so, generate the redirectable source as an authorized redirect source and send it to the encrypted transmission module; Otherwise, an authorization request is sent to the management module.

7. A vulnerability risk assessment and monitoring system for network security according to claim 6, characterized in that: The process of the encrypted transmission module acquiring the encrypted jump user includes: Get the jump request corresponding to the authorized jump source, click the jump request to get the jump user, and then get the jump user authorization function corresponding to the jump user and send it to the third transmission encryption model; The third transmission encryption model is provided with an automatic closing mechanism and is wirelessly connected to a function database, and obtains a jump user authorization function and compares it with the function database. If it exists in the function database, the corresponding jump user authorization function is automatically closed; otherwise, the jump user authorization function is sent to the jump user interface to generate a confirmation log; A user confirmation mechanism is provided in the jump user interface for receiving and confirming the confirmation log; The jump user receives the confirmation log according to the user confirmation mechanism and manually judges the jump user authorization function, manually selects the jump user authorization function that needs to be closed and confirms it. If the confirmation is successful, the encrypted jump user is obtained and the jump is performed.

8. A vulnerability risk assessment and monitoring system for network security according to claim 7, characterized in that: The process of the target monitoring unit acquiring abnormal jump data includes: Send the jump user authorization function manually closed by the jump user through the user confirmation mechanism to the function database for storage; The jump user authorization function of the encrypted jump user during the jump process is obtained, and the abnormal jump data is obtained according to the function database and sent to the abnormal management unit.

9. A vulnerability risk assessment and monitoring system for network security according to claim 8, characterized in that: The process of managing abnormal jump data by the abnormal management unit includes: The exception management unit is used to receive and manage vulnerability target URLs, potential target URLs and abnormal jump data.

Images