Software installation state verification method, apparatus and device, and readable storage medium

Abstract

The invention discloses a software installation state verification method and device, equipment and a readable storage medium. The method comprises the steps that a to-be-verified IP address reported by a scanning node is obtained, the scanning node scans a network area where the scanning node is located, and the to-be-verified IP address is obtained; if the target software installation record corresponding to the to-be-verified IP address exists, performing reconnection verification on the to-be-verified IP address; and if the reconnection verification fails, determining that the target software is not installed in the equipment of which the IP address is the to-be-verified IP address in the network area where the scanning node is located. Through the application, when the target software installation record corresponding to the to-be-verified IP address exists, reconnection verification is further performed on the to-be-verified IP address, so that the target software installation state of the equipment of which the IP address is the to-be-verified IP address in the network area where the scanning node is located can be more accurately determined.

Description

Technical Field

[0001] The present application relates to the field of network security technology, and in particular to a software installation status verification method, device, equipment and computer-readable storage medium. Background Art

[0002] Ensuring that each host / device has security protection software installed is an important measure to ensure network security. The installation coverage of security protection software is directly related to whether the assets in the network can be effectively protected. For this reason, it is particularly important to identify and accurately determine whether the host has installed protection software. A typical method is the host security cluster, which scans the network area where the node is located by scanning the node, similar to NMAP scanning to identify which other hosts are in the network area, and by comparing the correspondence between the IP address recorded in the known asset table of the host security server and the installation status, it can identify which security protection software has been installed and which has not been installed in the scan results.

[0003] However, in complex network architectures, such as multi-cloud scenarios, multiple hosts in different network areas may have the same IP address. For example, the IP address of host A in network area 1 is 192.168.1.10, and the IP address of host B in network area 2 is 192.168.1.10. Among them, host A has security protection software installed, and the installation status corresponding to the recorded 192.168.1.10 is installed. If the judgment is based on the installation record, it will be directly determined that host B also has security protection software installed, but in fact host B may not have security protection software installed. It can be seen that based on the recording of the installation status of the IP address, it is impossible to accurately reflect the installation status of the security protection software of each host. Summary of the invention

[0004] In order to solve the above technical problems, the present application provides a software installation status verification method, device, equipment and computer-readable storage medium.

[0005] In a first aspect, an embodiment of the present application provides a method for verifying a software installation status, the method comprising:

[0006] Obtain the IP address to be verified reported by the scanning node, wherein the scanning node scans the network area where it is located to obtain the IP address to be verified;

[0007] If there is a target software installation record corresponding to the IP address to be verified, then the IP address to be verified is back-connected for verification;

[0008] If the back-connection verification fails, it is determined that a device in the network area where the scanning node is located and whose IP address is the IP address to be verified does not have the target software installed.

[0009] In combination with the first aspect, in one implementation, after receiving a back-connection verification request, the device on which the target software has been installed sends a back-connection signal with the designated IP address included in the back-connection verification request as the destination address, where the designated IP address is the IP address of the scanning node.

[0010] In combination with the first aspect, in one implementation, the performing back-connection verification on the IP address to be verified includes:

[0011] Sending a back-connection verification request to a device whose IP address is the IP address to be verified and on which the target software has been installed;

[0012] Detecting whether the scanning node receives a return connection signal;

[0013] If no return signal is received, it is determined that the verification has failed.

[0014] In combination with the first aspect, in one implementation, after obtaining the to-be-verified IP address reported by the scanning node, the method further includes:

[0015] If there is no target software installation record corresponding to the IP address to be verified, the installation package of the target software is sent to a device whose IP address is the IP address to be verified in the network area where the scanning node is located.

[0016] In combination with the first aspect, in one implementation, after determining that a device in the network area where the scanning node is located with an IP address that is the IP address to be verified does not have the target software installed if the backlink verification fails, the method further includes:

[0017] The installation package of the target software is sent to a device whose IP address is the IP address to be verified in the network area where the scanning node is located.

[0018] In a second aspect, an embodiment of the present application provides a software installation status verification device, the software installation status verification device comprising:

[0019] An acquisition module is used to acquire the IP address to be verified reported by the scanning node, wherein the scanning node scans the network area where it is located to obtain the IP address to be verified;

[0020] A verification module, configured to perform a back-connection verification on the IP address to be verified if there is a target software installation record corresponding to the IP address to be verified;

[0021] The determination module is used to determine that the device with the IP address to be verified in the network area where the scanning node is located does not have the target software installed if the back-connection verification fails.

[0022] In combination with the second aspect, in one implementation, after receiving a back-connection verification request, the device on which the target software has been installed sends a back-connection signal with the designated IP address included in the back-connection verification request as the destination address, where the designated IP address is the IP address of the scanning node.

[0023] In conjunction with the second aspect, in one implementation, the verification module is used to:

[0024] Sending a back-connection verification request to a device whose IP address is the IP address to be verified and on which the target software has been installed;

[0025] Detecting whether the scanning node receives a return connection signal;

[0026] If no return signal is received, it is determined that the verification has failed.

[0027] In a third aspect, an embodiment of the present application provides a software installation status verification device, which includes a processor, a memory, and a software installation status verification program stored in the memory and executable by the processor, wherein when the software installation status verification program is executed by the processor, the steps of the software installation status verification method described in the first aspect are implemented.

[0028] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, on which a software installation status verification program is stored, wherein when the software installation status verification program is executed by a processor, the steps of the software installation status verification method described in the first aspect are implemented.

[0029] The beneficial effects brought by the technical solution provided by the embodiments of the present application include:

[0030] In the embodiment of the present application, the IP address to be verified reported by the scanning node is obtained, wherein the scanning node scans the network area where it is located to obtain the IP address to be verified; if there is a target software installation record corresponding to the IP address to be verified, the IP address to be verified is back-connected for verification; if the back-connection verification fails, it is determined that the device with the IP address to be verified in the network area where the scanning node is located has not installed the target software. Through the embodiment of the present application, when there is a target software installation record corresponding to the IP address to be verified, the IP address to be verified is further back-connected for verification, which can more accurately determine the target software installation status of the device with the IP address to be verified in the network area where the scanning node is located. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] Figure 1 This is a flowchart of an embodiment of a method for verifying software installation status of the present application;

[0032] Figure 2This is a functional module diagram of an embodiment of a software installation status verification device of the present application;

[0033] Figure 3 This is a schematic diagram of the hardware structure of the software installation status verification device involved in the embodiment of the present application. DETAILED DESCRIPTION

[0034] In order to enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be described clearly and completely below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without creative work are within the scope of protection of the present application.

[0035] In order to make the objectives, technical solutions and advantages of the present application clearer, the implementation methods of the present application will be further described in detail below with reference to the accompanying drawings.

[0036] In a first aspect, an embodiment of the present application provides a method for verifying software installation status.

[0037] In one embodiment, referring to Figure 1 , Figure 1 This is a flow chart of an embodiment of the software installation status verification method of this application. Figure 1 As shown, the software installation status verification method includes:

[0038] Step S10, obtaining the IP address to be verified reported by the scanning node, wherein the scanning node scans the network area where it is located to obtain the IP address to be verified;

[0039] In this embodiment, for the sake of convenience, two network areas are taken as examples, namely network area 1 and network area 2, and there is network isolation between different network areas. Among them, network area 1 includes devices 11, 12, and 13; network area 2 includes devices 21 and 22. For any network area, any device can be used as a scanning node. For example, in network area 1, device 11 is used as a scanning node, and in network area 2, device 22 is used as a scanning node.

[0040] For any scanning node, other devices in the network area where it is located can be found through active scanning, and the IP addresses of other devices can be obtained and uploaded to the execution subject (such as a server) of this embodiment as the addresses to be verified. For example, device 11 finds device 12 and device 13 through active scanning, and reports the IP address IP_12 of device 12 and the IP address IP_13 of device 13 as the IP addresses to be verified to the server; similarly, device 22 finds device 21 through active scanning, and reports the IP address IP_21 of device 21 as the IP address to be verified to the server.

[0041] Taking the above description as an example, for the server, when the scanning node is device 11, the obtained IP addresses to be verified include: IP_12 and IP_13.

[0042] Step S20: If there is a target software installation record corresponding to the IP address to be verified, then a back-connection verification is performed on the IP address to be verified;

[0043] In this embodiment, for any device in each network area, if the target software is installed, a corresponding target software installation record is formed and saved, wherein the target software installation record at least includes the IP address of the device, and of course may also include other information, such as installation time. The target software is set according to actual needs and is not limited here.

[0044] Based on the above description, for each IP address to be verified, check whether there is a corresponding target software installation record. For example, IP_12 is specifically 192.168.1.10, and IP_13 is specifically 192.168.1.20.

[0045] If there is a target software installation record corresponding to 192.168.1.10, a backconnect verification is performed on IP_12.

[0046] Further, in one embodiment, after receiving the back-connection verification request, the device with the target software installed sends a back-connection signal with the designated IP address included in the back-connection verification request as the destination address, and the designated IP address is the IP address of the scanning node.

[0047] In this embodiment, only the device that has installed the target software can receive the back-connection verification request sent by the server. Taking the scanning node as device 11 as an example, the designated IP address included in the back-connection verification request is the IP address IP_11 of device 11. After receiving the back-connection verification request, the device that has installed the target software sends a back-connection signal with IP_11 as the destination address. Among them, the target software client of the device that has installed the target software can communicate with the server on the server side. The server has the result data. The server sends a back-connection verification request to the target software client so that the target software client can actively connect to the designated IP address.

[0048] Further, in one embodiment, the performing back-connection verification on the IP address to be verified includes:

[0049] Send a back-connection verification request to a device whose IP address is the IP address to be verified and on which the target software has been installed; detect whether the scanning node receives a back-connection signal; if no back-connection signal is received, determine that the verification fails.

[0050] In this embodiment, it is assumed that the target software is actually installed on device 21, and the target software is not installed on device 12. Then, when the scanning node is device 11, and IP_12 and IP_21 = 192.168.1.10, and there is an installation record of 192.168.1.10, the server sends a back-connection verification request to device 21, and the specified IP address contained in the back-connection verification request is the IP address IP_11 of device 11, then device 21 needs to send a back-connection signal with IP_11 as the destination address. Due to network isolation between different network areas, device 11 cannot receive the loop signal sent by device 21, and it is determined that the verification has failed.

[0051] Step S30: If the back-connection verification fails, it is determined that the device in the network area where the scanning node is located and whose IP address is the IP address to be verified does not have the target software installed.

[0052] In this embodiment, combined with the above description, when device 11 cannot receive the loop signal sent by device 21, it is determined that the verification has failed, then it is determined that the back-connection verification of IP_12 has failed, and it is determined that the device with an IP address of 192.168.1.10 in network area 1 where device 11 is located has not installed the target software.

[0053] In the embodiment of the present application, the IP address to be verified reported by the scanning node is obtained, wherein the scanning node scans the network area where it is located to obtain the IP address to be verified; if there is a target software installation record corresponding to the IP address to be verified, the IP address to be verified is back-connected for verification; if the back-connection verification fails, it is determined that the device with the IP address to be verified in the network area where the scanning node is located has not installed the target software. Through the embodiment of the present application, when there is a target software installation record corresponding to the IP address to be verified, the IP address to be verified is further back-connected for verification, which can more accurately determine the target software installation status of the device with the IP address to be verified in the network area where the scanning node is located.

[0054] Furthermore, in one embodiment, after step S10, the method further includes:

[0055] If there is no target software installation record corresponding to the IP address to be verified, the installation package of the target software is sent to a device whose IP address is the IP address to be verified in the network area where the scanning node is located.

[0056] In this embodiment, taking the IP addresses to be verified obtained by the server including IP_12 and IP_13 as an example, if there is no target software installation record corresponding to IP_13, it means that device 13 has not installed the target software, then the installation package of the target software is sent to the device with IP address IP_13 in network area 1 where device 11 is located, so that device 13 can install the target software, thereby increasing the target software installation coverage and improving network security.

[0057] Furthermore, in one embodiment, after step S30, the method further includes:

[0058] The installation package of the target software is sent to a device whose IP address is the IP address to be verified in the network area where the scanning node is located.

[0059] In this embodiment, referring to the above description, after determining that the device with IP address 192.168.1.10 in network area 1 where device 11 is located has not installed the target software, the installation package of the target software is sent to the device with IP address 192.168.1.10 in network area 1 so that it can install the target software, thereby increasing the installation coverage of the target software and improving network security.

[0060] In a second aspect, an embodiment of the present application also provides a software installation status verification device.

[0061] In one embodiment, referring to Figure 3 , Figure 3 This is a functional module diagram of an embodiment of the software installation status verification device of the present application. Figure 3 As shown, the software installation status verification device includes:

[0062] The acquisition module 10 is used to acquire the IP address to be verified reported by the scanning node, wherein the scanning node scans the network area where it is located to obtain the IP address to be verified;

[0063] The verification module 20 is used to perform a back-connection verification on the IP address to be verified if there is a target software installation record corresponding to the IP address to be verified;

[0064] The determination module 30 is used to determine that the device with the IP address to be verified in the network area where the scanning node is located does not have the target software installed if the back-connection verification fails.

[0065] Further, in one embodiment, after receiving the back-connection verification request, the device with the target software installed sends a back-connection signal with the designated IP address included in the back-connection verification request as the destination address, and the designated IP address is the IP address of the scanning node.

[0066] Furthermore, in one embodiment, the verification module 20 is used to:

[0067] Sending a back-connection verification request to a device whose IP address is the IP address to be verified and on which the target software has been installed;

[0068] Detecting whether the scanning node receives a return connection signal;

[0069] If no return signal is received, it is determined that the verification has failed.

[0070] Furthermore, in one embodiment, the software installation status verification device further includes a sending module, which is used to:

[0071] If there is no target software installation record corresponding to the IP address to be verified, the installation package of the target software is sent to a device whose IP address is the IP address to be verified in the network area where the scanning node is located.

[0072] Furthermore, in one embodiment, the software installation status verification device further includes a sending module, which is used to:

[0073] The installation package of the target software is sent to a device whose IP address is the IP address to be verified in the network area where the scanning node is located.

[0074] Among them, the functional implementation of each module in the above-mentioned software installation status verification device corresponds to each step in the above-mentioned software installation status verification method embodiment, and its functions and implementation processes are no longer repeated here one by one.

[0075] In a third aspect, an embodiment of the present application provides a software installation status verification device, which may be a personal computer (PC), a laptop computer, a server, or other device with data processing capabilities.

[0076] Reference Figure 3 , Figure 3 Schematic diagram of the hardware structure of the software installation status verification device involved in the embodiment of the present application. In the embodiment of the present application, the software installation status verification device may include a processor, a memory, a communication interface and a communication bus.

[0077] The communication bus may be of any type and is used to interconnect the processor, the memory, and the communication interface.

[0078] The communication interface includes an input / output (I / O) interface, a physical interface, and a logical interface, etc., which are used to interconnect the devices inside the software installation status verification device, and an interface used to interconnect the software installation status verification device with other devices (such as other computing devices or user devices). The physical interface can be an Ethernet interface, an optical fiber interface, an ATM interface, etc.; the user device can be a display, a keyboard, etc.

[0079] The memory can be various types of storage media, such as random access memory (RAM), read-only memory (ROM), non-volatile RAM (NVRAM), flash memory, optical storage, hard disk, programmable ROM (PROM), erasable PROM (EPROM), electrically erasable PROM (EEPROM), etc.

[0080] The processor may be a general-purpose processor, and the general-purpose processor may call the software installation status verification program stored in the memory and execute the software installation status verification method provided by the embodiment of the present application. For example, the general-purpose processor may be a central processing unit (CPU). The method executed when the software installation status verification program is called may refer to the various embodiments of the software installation status verification method of the present application, which will not be repeated here.

[0081] Those skilled in the art will understand that Figure 3The hardware structure shown in the figure does not constitute a limitation on the present application, and may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently.

[0082] In a fourth aspect, an embodiment of the present application also provides a computer-readable storage medium.

[0083] The computer-readable storage medium of the present application stores a software installation status verification program, wherein when the software installation status verification program is executed by a processor, the steps of the software installation status verification method as described above are implemented.

[0084] Among them, the method implemented when the software installation status verification program is executed can refer to the various embodiments of the software installation status verification method of the present application, and will not be repeated here.

[0085] It should be noted that the serial numbers of the above-mentioned embodiments of the present application are only for description and do not represent the advantages or disadvantages of the embodiments.

[0086] The terms "including" and "having" and any variations thereof in the specification and claims of this application and the above-mentioned drawings are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not limited to the listed steps or units, but optionally includes steps or units that are not listed, or optionally includes other steps or units inherent to these processes, methods, products or devices. The terms "first", "second" and "third" are used to distinguish different objects, etc., and do not represent a sequence, nor do they limit "first", "second" and "third" to different types.

[0087] In the description of the embodiments of the present application, "exemplary", "for example" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary", "for example" or "for example" in the embodiments of the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary", "for example" or "for example" is intended to present related concepts in a specific way.

[0088] In the description of the embodiments of the present application, unless otherwise specified, “ / ” means or, for example, A / B can mean A or B; the “and / or” in the text is merely a description of the association relationship of associated objects, indicating that three relationships may exist, for example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone. In addition, in the description of the embodiments of the present application, “multiple” refers to two or more than two.

[0089] In some processes described in the embodiments of the present application, multiple operations or steps that appear in a specific order are included, but it should be understood that these operations or steps may not be executed in the order in which they appear in the embodiments of the present application or in parallel, and the sequence number of the operation is only used to distinguish the different operations, and the sequence number itself does not represent any execution order. In addition, these processes may include more or fewer operations, and these operations or steps may be executed in sequence or in parallel, and these operations or steps may be combined.

[0090] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application is essentially or the part that contributes to the prior art can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, disk, CD) as described above, and includes a number of instructions for a terminal device to execute the methods described in each embodiment of the present application.

[0091] The above are only preferred embodiments of the present application, and are not intended to limit the patent scope of the present application. Any equivalent structure or equivalent process transformation made using the contents of the present application specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present application.

Claims

1. A method for verifying software installation status, characterized in that: The software installation status verification method comprises: Obtain the IP address to be verified reported by the scanning node, wherein the scanning node scans the network area where it is located to obtain the IP address to be verified; If there is a target software installation record corresponding to the IP address to be verified, then the IP address to be verified is back-connected for verification; If the back-connection verification fails, it is determined that a device in the network area where the scanning node is located and whose IP address is the IP address to be verified does not have the target software installed.

2. The software installation status verification method according to claim 1, characterized in that: After receiving the back-connection verification request, the device on which the target software has been installed sends a back-connection signal with the designated IP address included in the back-connection verification request as the destination address, where the designated IP address is the IP address of the scanning node.

3. The software installation status verification method according to claim 2, characterized in that: The performing back-connection verification on the IP address to be verified includes: Sending a back-connection verification request to a device whose IP address is the IP address to be verified and on which the target software has been installed; Detecting whether the scanning node receives a return connection signal; If no return signal is received, it is determined that the verification has failed.

4. The software installation status verification method according to claim 1, characterized in that: After obtaining the IP address to be verified reported by the scanning node, the method further includes: If there is no target software installation record corresponding to the IP address to be verified, the installation package of the target software is sent to a device whose IP address is the IP address to be verified in the network area where the scanning node is located.

5. The software installation status verification method according to any one of claims 1 to 4, characterized in that: After determining that the device in the network area where the scanning node is located with the IP address to be verified has not installed the target software if the backlink verification fails, the method further includes: The installation package of the target software is sent to a device whose IP address is the IP address to be verified in the network area where the scanning node is located.

6. A software installation status verification device, characterized in that: The software installation status verification device comprises: An acquisition module is used to acquire the IP address to be verified reported by the scanning node, wherein the scanning node scans the network area where it is located to obtain the IP address to be verified; A verification module, configured to perform a back-connection verification on the IP address to be verified if there is a target software installation record corresponding to the IP address to be verified; The determination module is used to determine that the device with the IP address to be verified in the network area where the scanning node is located does not have the target software installed if the back-connection verification fails.

7. The software installation status verification device according to claim 6, characterized in that: After receiving the back-connection verification request, the device on which the target software has been installed sends a back-connection signal with the designated IP address included in the back-connection verification request as the destination address, where the designated IP address is the IP address of the scanning node.

8. The software installation status verification device according to claim 7, characterized in that: Authentication module for: Sending a back-connection verification request to a device whose IP address is the IP address to be verified and on which the target software has been installed; Detecting whether the scanning node receives a return connection signal; If no return signal is received, it is determined that the verification has failed.

9. A software installation status verification device, characterized in that: The software installation status verification device includes a processor, a memory, and a software installation status verification program stored in the memory and executable by the processor, wherein when the software installation status verification program is executed by the processor, the steps of the software installation status verification method as described in any one of claims 1 to 5 are implemented.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a software installation status verification program, wherein when the software installation status verification program is executed by the processor, the steps of the software installation status verification method according to any one of claims 1 to 5 are implemented.

Images