Component information processing method and device, computer equipment and storage medium

Abstract

The invention relates to a component information processing method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps: acquiring a client program file and a component association relationship library of a target website; extracting component feature information in the client program file according to the component association relationship library; and determining the server component of the target website according to the component feature information and the component association relationship library. By adopting the method, the identification integrity of the target website component can be improved.

Description

Technical Field

[0001] This application relates to the field of network security technology, and in particular, to a method, device, computer device, storage medium, and computer program product for processing component information. Background Art

[0002] Currently, in the context of the rapid development of Web technology, the identification of website components is of great significance in multiple fields such as network security, search engine optimization, and website analysis. Accurately identifying the Web components used by a website can not only help security researchers detect vulnerabilities, but also provide more accurate data support for search engine optimization, and at the same time assist developers in optimizing the website architecture.

[0003] However, traditional Web component identification methods mainly rely on keyword matching or rule matching, which identify components by collecting and organizing the keywords of the components. However, the front-end web pages generally do not contain back-end information, which results in incomplete identification information of the target website and cannot fully identify website components. Summary of the Invention

[0004] Based on this, in view of the above technical problems, it is necessary to provide a method, device, computer device, computer-readable storage medium, and computer program product for processing component information that can improve the integrity of identifying components of a target website.

[0005] In a first aspect, this application provides a method for processing component information, including:

[0006] Obtain the client program file of the target website and the component association relationship library;

[0007] Extract the component feature information from the client program file according to the component association relationship library;

[0008] Determine the server-side components of the target website according to the component feature information and the component association relationship library.

[0009] In one embodiment, the server-side components include a first server-side component and a second server-side component; the determining the server-side components of the target website according to the component feature information and the component association relationship library includes:

[0010] Determine the first server-side component of the target website according to the component feature information;

[0011] Query the component association relationship library to obtain the second server-side component; wherein, the existence of the first server-side component is a sufficient condition for the existence of the second server-side component.

[0012] In one embodiment, the client program file includes a client source program file and a server response file; extracting component feature information from the client program file according to the component association relationship library includes:

[0013] Identifying website fingerprint information recorded in the component association relationship library in the client source program file and the server response file;

[0014] Determining associated feature information associated with the website fingerprint information according to the component association relationship library;

[0015] Collecting the website fingerprint information and the associated feature information to obtain component feature information.

[0016] In one embodiment, the method further includes:

[0017] Selecting a corresponding security verification method according to the component type of each server component;

[0018] Using the security verification method to perform security verification on the server component.

[0019] In one embodiment, after using the security verification method to perform security verification on the server component, it further includes:

[0020] When the component type of the server component is a database type, determining the network segment range where the server component is located;

[0021] Scanning target components within the network segment range according to the component feature information corresponding to the server component;

[0022] Using the security verification method to perform security verification on the target component.

[0023] In one embodiment, the method further includes:

[0024] Generating component display information of the target website according to the server component and the verification result of the security verification;

[0025] Outputting the component display information.

[0026] In a second aspect, the present application further provides a component information processing device, including:

[0027] A data acquisition module, configured to acquire a client program file of a target website and a component association relationship library;

[0028] A feature extraction module, configured to extract component feature information from the client program file according to the component association relationship library;

[0029] A component analysis module, configured to determine the server components of the target website according to the component feature information and the component association relationship library.

[0030] In a third aspect, the present application further provides a computer device, including a memory and a processor. The memory stores a computer program, and when the processor executes the computer program, the following steps are implemented:

[0031] Obtain the client program file of the target website and the component association relationship library;

[0032] Extract the component feature information in the client program file according to the component association relationship library;

[0033] Determine the server components of the target website according to the component feature information and the component association relationship library.

[0034] In a fourth aspect, the present application further provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the following steps are implemented:

[0035] Obtain the client program file of the target website and the component association relationship library;

[0036] Extract the component feature information in the client program file according to the component association relationship library;

[0037] Determine the server components of the target website according to the component feature information and the component association relationship library.

[0038] In a fifth aspect, the present application further provides a computer program product, including a computer program. When the computer program is executed by a processor, the following steps are implemented:

[0039] Obtain the client program file of the target website and the component association relationship library;

[0040] Extract the component feature information in the client program file according to the component association relationship library;

[0041] Determine the server components of the target website according to the component feature information and the component association relationship library.

[0042] The above-mentioned component information processing method, device, computer device, storage medium, and computer program product obtain the client program file of the target website and the component association relationship library, obtain the association relationships between the components in the component association relationship library, and extract the component feature information that can be recognized in the client program file according to these association relationships. Since each component does not exist independently but has an association relationship, the server components of the target website that cannot be recognized through the client program file can be determined based on the recognized component feature information and the component association relationship library, thereby improving the integrity of target website component recognition. Brief Description of the Drawings

[0043] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the related art, the following will briefly introduce the drawings required for use in the description of the embodiments or the related art. Obviously, the following-described drawings are only some embodiments of the present application. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative efforts.

[0044] Figure 1 It is an application environment diagram of the component information processing method in an embodiment;

[0045] Figure 2 It is a flowchart of the component information processing method in an embodiment;

[0046] Figure 3 It is a flowchart of step S204 of the component information processing method in an embodiment;

[0047] Figure 4 It is a structural block diagram of the component information processing device in an embodiment;

[0048] Figure 5 It is an internal structure diagram of a computer device in an embodiment;

[0049] Figure 6 It is an internal structure diagram of a computer device in another embodiment. Detailed Embodiments

[0050] In order to make the purpose, technical solutions, and advantages of the present application clearer, the following further details the present application in combination with the drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0051] The component information processing method provided by the embodiments of the present application can be applied to, for example Figure 1In the application environment shown. Among them, the terminal 102 of the target website communicates with the server 104 of the target website through the network, and is used to display the page content of the target website. The server 104 can obtain the client program file for displaying the page content and the response file from the server side. The data storage system can store the data that the server 104 needs to process. The data storage system can be integrated on the server 104, or can be placed on the cloud or other network servers. The data storage system can be used to store the association relationships between components to form a component association relationship library, and to store information such as the client program file of the target website. Among them, the terminal 102 can be, but is not limited to, various personal computers, laptop computers, smart phones, tablet computers, Internet of Things devices, and portable wearable devices. The server 104 can be implemented by an independent server or a server cluster composed of multiple servers.

[0052] In an exemplary embodiment, as Figure 2 shown, a component information processing method is provided. Taking the server 104 in Figure 1 as an example for illustration, it includes the following steps S202 to step S206. Among them:

[0053] Step S202, obtain the client program file of the target website and the component association relationship library.

[0054] Among them, the client program file refers to the program file used to display the page content of the target website, that is, the front-end program file; the component association relationship library is used to record the association relationships between components.

[0055] Exemplarily, the target website refers to a specific Web site that the server 104 needs to detect and analyze. For example, an online shopping mall running at the IP address 203.0.113.5 may use a certain content management system (CMS, Content Management System) to manage the content on its home page, and the background server side is used to run a specific Web framework and database. The server 104 can extract key information from the front-end page and related resources of the website to further identify the components on its server side.

[0056] The client program file can include Hyper Text Markup Language (HTML), Cascading Style Sheets (CSS), JavaScript (JavaScript) files, and data that may be loaded through an Application Programming Interface (API).

[0057] The component association relationship library is a knowledge base used to record the dependency relationships between various Web components. It contains a large number of known Web frameworks, CMSs, databases, server software, and their symbiotic relationships. For example, this knowledge base may store the following rules: If the HyperText Transfer Protocol (HTTP) response header of a website contains "X-Powered-By: PHP", then its backend is likely to be running a PHP (Hypertext Preprocessor) environment; if the front end of the website references a path such as " / admin / view / javascript / jquery / jquery-2.1.1.min.js", it can be determined that the site may be built on OpenCart (OpenCart e-commerce platform). Further, if server 104 discovers that the HTML code of the website's home page contains "metaname=generatorcontent=Joomla!", not only can it be determined that the website uses Joomla! (Joomla! content management system), but it can also be inferred from the component relationship library that its backend may be running a MySQL (MySQL relational database management system) database and paired with an Apache (Apache HTTP server) or Nginx (Nginx reverse proxy server) server. By obtaining the client program files of the target website and combining them with the component association relationship library, server 104 can quickly collect the basic technical information of the website during the initial scanning stage.

[0058] Exemplarily, in the home page of an e-commerce website, server 104 can identify that jQuery.js, Vue.js, or certain specific front-end user interface (UI) library files are loaded in the web page through the client program files. For example, if server 104 detects that the page references wp-includes / js / jquery / jquery.js, it can initially determine that the website may be built on WordPress (content management system), and if the variable name Drupal.behaviors appears in the HTML program file, it can be inferred that the website may be using Drupal (Drupal, content management system) as its CMS.

[0059] Step S204: Extract the component feature information in the client program files according to the component association relationship library.

[0060] Exemplarily, after obtaining the client program files of the target website, the server 104 can extract component feature information from these files using the component association relationship library. Component feature information refers to certain specific code snippets, file paths, response header information, or front-end resources. The server 104 can use this information to determine component information such as the back-end architecture, server environment, and database type relied on by the website. In this way, the server 104 can not only identify obvious components but also infer hidden technical features by combining association rules. Further, the server 104 can analyze the client program files from multiple dimensions.

[0061] For example, in an HTML program file, the server 104 may look for certain specific meta tags or comment information. If the server 104 discovers component feature information in a part of the web page: <meta name="generator" content="WordPress">, then it can be confirmed that the website uses WordPress (WordPress, a WordPress content management system). In addition to HTML, the server 104 can also analyze JavaScript program files and related front-end resource files. In some websites, JavaScript variable names or function names may imply the back-end architecture.

[0062] On the other hand, many servers and frameworks carry specific identification information in the response header. The server 104 can also check the HTTP (Hyper Text Transfer Protocol) response header. For example, if the server 104 discovers "X-Powered-By: PHP / 7.4.3", it can determine that the website is running the PHP language and the version is 7.4.3. If "nginx / 1.18.0" appears in the Server header information, it indicates that the website uses Nginx (a reverse proxy server) as the web server.

[0063] Step S206, determine the server-side components of the target website according to the component feature information and the component association relationship library.

[0064] Among them, the server-side components include the first server-side component and the second server-side component.

[0065] Exemplarily, the server 104 can determine the first server-side component of the target website according to the component feature information; query the component association relationship library to obtain the second server-side component; where the existence of the first server-side component is a sufficient condition for the existence of the second server-side component.

[0066] Furthermore, the server 104 can identify two types of server components: the first server component and the second server component, and infer the complete technology stack of the website through the component association relationship. Among them, the first server component is the component directly identified through feature information, while the second server component is further inferred based on the first server component, that is, the existence of the first server component is a sufficient condition for the existence of the second server component. First, the server 104 can directly analyze one or several of the client program files, HTML program files, JavaScript resources, and HTTP response headers of the target website to determine the first server component.

[0067] Next, the server 104 can query the component association relationship library to find the association information of the first server component. For example, according to the existing knowledge base records, DataLifeEngine mainly uses PHP as the backend development language, and its default server environment usually runs on the Apache HTTP server and uses MySQL as the database. Therefore, the server 104 can infer that the website also uses PHP, Apache, and MySQL as its backend language, web server, and database management system respectively, thus obtaining the second server component of the target website.

[0068] Similarly, when the server 104 discovers X-Powered-By: CMSDanneo in the client resources, it can directly confirm that the website runs Danneo CMS, which also belongs to the first server component. Then, the server 104 queries the component association relationship library and learns that Danneo CMS runs by default in the PHP language environment and generally runs on the Apache server. Therefore, the server 104 can further infer that the website uses PHP and Apache as the backend environment, and these inferred components are the second server components.

[0069] Furthermore, the server 104 can not only judge the server-side environment component from the component name, but also judge the server-side environment component in combination with a specific file structure. For example, if the server 104 finds that the website has a file path such as " / wp-content / plugins / woocommerce / assets / js / frontend.js", it can be judged that the website uses Woo Commerce (e-commerce plug-in), thereby obtaining the first server-side component. Subsequently, the server 104 can find out that WooCommerce is a plug-in for WordPress (content management system) by querying the component association library, and WordPress is usually developed based on PHP and runs on Apache or Nginx servers. Therefore, the server 104 can further believe that the target website is running WordPress, PHP and Apache / Nginx servers, thereby obtaining the second server-side component of the target website.

[0070] In other embodiments, the server 104 can also combine the information of multiple first server-side components to strengthen the speculation on the second server-side component. For example, if the server 104 simultaneously finds that the website contains the com_content component and the X-Powered-By:Joomla! response header, it can not only confirm that Joomla! is the first server-side component, but also infer that the back-end environment in which it runs may be PHP and MySQL, and the server may be Apache. If the server 104 also finds that the HTTP response header of the target website contains "Set-Cookie:PHPSESSID=xxxxxx;path= / ", the existence of PHP is further verified, and the server 104 can further infer whether the website may use a specific PHP version based on the PHP session management method. Therefore, the server 104 can start from the first server-side component, combine the component association library for logical reasoning, and finally infer the complete second server-side component of the website. Even if some server-side components are not directly exposed in the web page source program file or the response header, the server 104 can still infer through the association between components to ensure that the complete technology stack of the website is accurately identified.

[0071] Further, the server 104 can also select a corresponding security verification method according to the component type of each server component; use the security verification method to perform security verification on the server component. Exemplarily, after using the security verification method to perform security verification on the server component, when the component type of the server component is of the database type, the server 104 can further determine the network segment range where the server component is located; scan the target components within the network segment range according to the component feature information corresponding to the server component; use the security verification method to perform security verification on the target components. Further, the server 104 can also generate component display information of the target website according to the server component and the verification result of the security verification; output the component display information.

[0072] Exemplarily, the server 104 can select a suitable security verification method according to the component type of each server component, and then perform targeted tests on these components to determine whether they have known vulnerabilities or configuration problems. When performing security verification, the server 104 can analyze the feature information of each server component and select a suitable test method. For example, if the server 104 identifies that the target website uses Apache, then it may use a specific security verification method to test for known security vulnerabilities of Apache, such as attempting to send a specific format of HTTP request to detect whether there are directory traversal vulnerabilities or remote program file execution vulnerabilities. Similarly, if the server 104 discovers that the website backend is running PHP, it may test for security vulnerabilities specific to the PHP version, such as PHP remote program file execution vulnerabilities.

[0073] Further, if the server 104 discovers that the target website uses MySQL as the database, it can further expand the scanning range, not just limited to the current website. The server 104 can use the feature information of MySQL to identify the network segment range where the database is located and scan the entire Class C IP address segment to find out whether there are other servers running MySQL within this network segment. Class C refers to the range where the first three octets of the IP address are the same. For example, 192.168.1.xxx may be a network segment shared by multiple servers within a company. If the IP address of the MySQL server of the target website is 203.0.113.25, then the server 104 can scan all IP addresses in the range of 203.0.113.xxx to find out whether there are other servers running the MySQL database.

[0074] When performing a network segment scan, server 104 can use the fingerprint information of the MySQL component for quick identification. For example, server 104 can detect whether port 3306 (the default port of MySQL) in the network segment is open, and attempt to obtain the server version number, default account information, and even test for the existence of weak passwords or unauthorized access. If it is found that a large number of websites use the same version of MySQL, server 104 can further determine whether these databases may be affected by the same vulnerabilities, and then use security verification methods to further test whether there is a risk of exploitation.

[0075] In addition to MySQL, server 104 can also perform similar security verification for other server components. For example, if Nginx is identified, server 104 can test for the existence of unauthorized access or malicious request forwarding vulnerabilities. If it is found that WordPress is used in the backend of the website, server 104 can test whether the website is running unupdated plugins or whether there are remote procedure call protocol exposure vulnerabilities.

[0076] After completing all security verifications, server 104 can also organize all the identified component information and their security statuses, generate a detailed component display information, and output it to the user or administrator.

[0077] In the above component information processing method, by obtaining the client program file of the target website and the component association relationship library, the association relationships between the components in the component association relationship library are obtained. According to these association relationships, the component feature information that can be recognized in the client program file is extracted. Since each component does not exist independently but has an association relationship, the server components of the target website that cannot be recognized through the client program file can be determined based on the recognized component feature information and the component association relationship library, thereby improving the integrity of the target website component recognition.

[0078] In an exemplary embodiment, as Figure 3 shown, the client program file includes a client source program file and a server response file; step S204 includes steps S302 to S306. Among them:

[0079] Step S302, identify the website fingerprint information recorded in the component association relationship library in the client source program file and the server response file.

[0080] Among them, the client source program files are the program files that constitute the front-end pages of the website and exist in formats such as HTML, CSS, JavaScript, etc. For example, the index.html file of the target website is used to organize the web page structure, the style.css file is used to define the web page style, and the app.js file controls the dynamic interaction of the web page. The server response files refer to the HTTP response content returned by the server to the client, including web page content, HTTP response headers, Cookies, and other information, which contains important information about the website operating environment.

[0081] Exemplarily, the server 104 can identify website fingerprint information from the client program files. Among them, the website fingerprint information refers to the signature data that can uniquely or highly characterize a certain component, and the signature data may exist in HTML program files, JavaScript files, CSS style files, or HTTP response headers. Further, the server 104 may find in the web source program files that the resource path information expressed as "assets.youthsrl.com / brownie" can be considered that the target website is running Brownie CMS.

[0082] Further, the component association relationship library, as a database storing the relationships between various Web components, contains the associations between components such as CMS, Web frameworks, server software, database systems, etc., and can also contain the association relationships between fingerprint features. Therefore, during the analysis of the target website, the server 104 can extract the fingerprint feature information from the client program files and compare these features with the data in the component association relationship library to infer more fingerprint information that has not been directly identified.

[0083] Step S304, determine the associated feature information associated with the website fingerprint information according to the component association relationship library.

[0084] Exemplarily, next, the server 104 looks up relevant feature information in the component association relationship library based on these identified fingerprint feature information. The component association relationship library not only records the relationships between different components, but also organizes and stores the associations between fingerprint features. For example, some features may not directly indicate the specific type of a certain component in the component association relationship library, but they may have some association with the fingerprints of other components. Through these association rules, the server 104 can infer the fingerprint features that have not been directly identified. For example, the server 104 has identified that a certain website uses the fingerprint information of assets.youthsrl.com / brownie. The component association relationship library may further associate this fingerprint with the relationship between PHP as the backend language and the MySQL database. Even if these fingerprint features are not directly exposed during the initial scan, the server 104 can infer more unrecognized features based on the associations between the fingerprints.

[0085] Step S306: Aggregate the website fingerprint information and the associated feature information to obtain component feature information.

[0086] Exemplarily, the server 104 can aggregate the website fingerprint information and the associated feature information to obtain component feature information. Based on the website fingerprint information and the associated feature information, the server 104 can not only identify the specific components being used by the website, but also infer the overall architecture of the website without directly accessing the server's configuration file or management panel.

[0087] Exemplarily, in the web page code and HTTP response headers of a certain website, the server 104 identifies multiple fingerprint information as component feature information, such as assets.youthsrl.com / brownie (Brownie CMS fingerprint), X-Powered-By: PHP / 7.4.3 (PHP version fingerprint), Server: Apache / 2.4.41 (Apache server fingerprint). The server 104 can then infer the complete component structure of the website, including using Brownie CMS for the front end, running PHP 7.4.3 for the backend, having Apache 2.4.41 as the web server, and the database may be MySQL (because Brownie CMS depends on MySQL).

[0088] In another exemplary embodiment, the server 104 obtains the client program file of the target website and the component association relationship library, then identifies the website fingerprint information recorded in the component association relationship library in the client source program file and the server response file, determines the associated feature information associated with the website fingerprint information according to the component association relationship library, and aggregates the website fingerprint information and the associated feature information to obtain component feature information.

[0089] Next, the server 104 determines the server components of the target website according to the component feature information and the component association relationship library: according to the component feature information, it determines the first server component of the target website, and then obtains the second server component by querying the component association relationship library; wherein, the existence of the first server component is a sufficient condition for the existence of the second server component.

[0090] Subsequently, the server 104 selects a corresponding security verification method according to the component type of each server component, and uses the security verification method to perform security verification on the server components. When the component type of the server component is of the database type, the server 104 determines the network segment range where the server component is located; according to the component feature information corresponding to the server component, it scans the target components within the network segment range, and uses the security verification method to perform security verification on the target components. Finally, the server 104 generates component display information of the target website according to the server components and the verification results of the security verification, and outputs the component display information.

[0091] It should be understood that although the steps in the flowcharts involved in the above-described embodiments are displayed in sequence according to the arrows, these steps do not necessarily need to be executed in the order indicated by the arrows. Unless there is a clear description in this article, the execution of these steps has no strict order limitation, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-described embodiments may include multiple steps or multiple stages, and these steps or stages do not necessarily need to be executed at the same moment, but can be executed at different moments, and the execution order of these steps or stages does not necessarily need to be sequential, but can be executed alternately or alternately with at least a part of other steps or steps or stages in other steps.

[0092] Based on the same inventive concept, an embodiment of the present application further provides a component information processing device for implementing the above-mentioned component information processing method. The implementation solutions provided by this device to solve problems are similar to the implementation solutions described in the above method. Therefore, the specific limitations in one or more embodiments of the component information processing device provided below can refer to the limitations on the component information processing method in the above text, and will not be repeated here.

[0093] In an exemplary embodiment, as Figure 4 shown, a component information processing device is provided, including: a data acquisition module 402, a feature extraction module 404, and a component analysis module 406, wherein:

[0094] The data acquisition module 402 is configured to acquire the client program file of the target website and the component association relationship library;

[0095] A feature extraction module 404, configured to extract component feature information in a client program file according to a component association relationship library;

[0096] A component analysis module 406, configured to determine server components of a target website according to the component feature information and the component association relationship library.

[0097] In one embodiment, the server components include a first server component and a second server component; the component analysis module 406 is specifically configured to: determine the first server component of the target website according to the component feature information; query the component association relationship library to obtain the second server component; wherein, the existence of the first server component is a sufficient condition for the existence of the second server component.

[0098] In one embodiment, the client program file includes a client source program file and a server response file; the feature extraction module 404 is specifically configured to: identify website fingerprint information recorded in the component association relationship library in the client source program file and the server response file; determine association feature information associated with the website fingerprint information according to the component association relationship library; aggregate the website fingerprint information and the association feature information to obtain the component feature information.

[0099] In one embodiment, the apparatus further includes:

[0100] A security verification module, configured to select a corresponding security verification method according to the component type of each server component; perform security verification on the server components using the security verification method.

[0101] In one embodiment, the security verification module is further configured to: when the component type of the server component is a database type, determine the network segment range where the server component is located; scan target components within the network segment range according to the component feature information corresponding to the server component; perform security verification on the target components using the security verification method.

[0102] In one embodiment, the apparatus further includes:

[0103] A result display module, configured to generate component display information of the target website according to the server components and the verification results of the security verification; output the component display information.

[0104] Each module in the above component information processing apparatus can be implemented in whole or in part by software, hardware, and their combination. The above modules can be embedded in the processor in the computer device in hardware form or be independent of it, or be stored in the memory in the computer device in software form, so as to be called by the processor to execute the operations corresponding to the above respective modules.

[0105] In an exemplary embodiment, a computer device is provided. The computer device may be a server, and its internal structural diagram may be as shown in Figure 5 FIG. Figure 5 . The computer device includes a processor, a memory, an input / output interface (Input / Output, abbreviated as I / O), and a communication interface. Among them, the processor, the memory, and the input / output interface are connected through a system bus, and the communication interface is connected to the system bus through the input / output interface. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program, and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store the association relationships between components to form a component association relationship library, and to store information such as client program files of the target website. The input / output interface of the computer device is used to exchange information between the processor and external devices. The communication interface of the computer device is used to communicate with external terminals through a network connection. When the computer program is executed by the processor, it implements a component information processing method.

[0106] In an exemplary embodiment, a computer device is provided. The computer device may be a terminal, and its internal structural diagram may be as shown in Figure 6 FIG. Figure 6 . The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit, and an input device. Among them, the processor, the memory, and the input / output interface are connected through a system bus, and the communication interface, the display unit, and the input device are connected to the system bus through the input / output interface. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is used to exchange information between the processor and external devices. The communication interface of the computer device is used to communicate with external terminals in a wired or wireless manner. The wireless manner can be implemented through WIFI, a mobile cellular network, NFC (Near Field Communication), or other technologies. When the computer program is executed by the processor, it implements a component information processing method. The display unit of the computer device is used to form a visually visible picture, which can be a display screen, a projection device, or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen. The input device of the computer device can be a touch layer covering the display screen, or a button, a trackball, or a touchpad provided on the computer device housing, or an external keyboard, touchpad, or mouse, etc.

[0107] Those skilled in the art can understand that Figure 6 The structure shown in Figure 6 is only a block diagram of some structures related to the solution of this application, and does not constitute a limitation on the computer device to which the solution of this application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine some components, or have a different component layout.

[0108] In an exemplary embodiment, a computer device is provided, including a memory and a processor. A computer program is stored in the memory. When the processor executes the computer program, the following steps are implemented: obtaining a client program file of a target website and a component association relationship library; extracting component feature information in the client program file according to the component association relationship library; determining a server-side component of the target website according to the component feature information and the component association relationship library.

[0109] In an embodiment, when the processor executes the computer program, the following steps are further implemented: determining a first server-side component of the target website according to the component feature information; querying the component association relationship library to obtain a second server-side component; wherein the existence of the first server-side component is a sufficient condition for the existence of the second server-side component.

[0110] In an embodiment, when the processor executes the computer program, the following steps are further implemented: identifying website fingerprint information recorded in the component association relationship library in the client source program file and the server response file; determining association feature information associated with the website fingerprint information according to the component association relationship library; aggregating the website fingerprint information and the association feature information to obtain component feature information.

[0111] In an embodiment, when the processor executes the computer program, the following steps are further implemented: selecting a corresponding security verification method according to the component type of each server-side component; using the security verification method to perform security verification on the server-side component.

[0112] In an embodiment, when the processor executes the computer program, the following steps are further implemented: when the component type of the server-side component is a database type, determining the network segment range where the server-side component is located; scanning the target component within the network segment range according to the component feature information corresponding to the server-side component; using the security verification method to perform security verification on the target component.

[0113] In an embodiment, when the processor executes the computer program, the following steps are further implemented: generating component display information of the target website according to the server-side component and the verification result of the security verification; outputting the component display information.

[0114] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the following steps are implemented: obtaining a client program file of a target website and a component association relationship library; extracting component feature information from the client program file according to the component association relationship library; and determining server-side components of the target website according to the component feature information and the component association relationship library.

[0115] In one embodiment, when the computer program is executed by a processor, the following steps are further implemented: determining a first server-side component of the target website according to the component feature information; querying the component association relationship library to obtain a second server-side component; wherein the existence of the first server-side component is a sufficient condition for the existence of the second server-side component.

[0116] In one embodiment, when the computer program is executed by a processor, the following steps are further implemented: identifying website fingerprint information recorded in a component association relationship library in a client source program file and a server response file; determining associated feature information associated with the website fingerprint information according to the component association relationship library; and aggregating the website fingerprint information and the associated feature information to obtain component feature information.

[0117] In one embodiment, when the computer program is executed by a processor, the following steps are further implemented: selecting a corresponding security verification method according to the component type of each server-side component; and performing security verification on the server-side component using the security verification method.

[0118] In one embodiment, when the computer program is executed by a processor, the following steps are further implemented: when the component type of the server-side component is a database type, determining the network segment range where the server-side component is located; scanning target components within the network segment range according to the component feature information corresponding to the server-side component; and performing security verification on the target component using the security verification method.

[0119] In one embodiment, when the computer program is executed by a processor, the following steps are further implemented: generating component display information of the target website according to the server-side component and the verification result of the security verification; and outputting the component display information.

[0120] In one embodiment, a computer program product is provided, including a computer program. When the computer program is executed by a processor, the following steps are implemented: obtaining a client program file of a target website and a component association relationship library; extracting component feature information from the client program file according to the component association relationship library; and determining server-side components of the target website according to the component feature information and the component association relationship library.

[0121] In one embodiment, when the computer program is executed by a processor, the following steps are further implemented: determining a first server component of a target website according to component feature information; querying a component association relationship library to obtain a second server component; wherein the existence of the first server component is a sufficient condition for the existence of the second server component.

[0122] In one embodiment, when the computer program is executed by a processor, the following steps are further implemented: identifying website fingerprint information recorded in a component association relationship library in a client source program file and a server response file; determining association feature information associated with the website fingerprint information according to the component association relationship library; aggregating the website fingerprint information and the association feature information to obtain component feature information.

[0123] In one embodiment, when the computer program is executed by a processor, the following steps are further implemented: selecting a corresponding security verification method according to the component type of each server component; using the security verification method to perform security verification on the server component.

[0124] In one embodiment, when the computer program is executed by a processor, the following steps are further implemented: in the case where the component type of the server component is a database type, determining the network segment range where the server component is located; scanning target components within the network segment range according to the component feature information corresponding to the server component; using the security verification method to perform security verification on the target components.

[0125] In one embodiment, when the computer program is executed by a processor, the following steps are further implemented: generating component display information of a target website according to the server component and the verification result of the security verification; outputting the component display information.

[0126] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use, and processing of the relevant data need to comply with relevant regulations.

[0127] Those of ordinary skill in the art can understand that all or part of the processes in the methods of the above embodiments can be completed by instructing relevant hardware through a computer program. The computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above methods. Among them, any reference to a memory, database, or other medium used in the embodiments provided in the present application can include at least one of non-volatile and volatile memories. Non-volatile memories can include read-only memory (ROM), magnetic tapes, floppy disks, flash memories, optical memories, high-density embedded non-volatile memories, resistive random access memories (ReRAM), magnetoresistive random access memories (MRAM), ferroelectric random access memories (FRAM), phase change memories (PCM), graphene memories, etc. Volatile memories can include random access memory (RAM) or external cache memories, etc. By way of illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM), etc. The databases involved in the embodiments provided in the present application can include at least one of relational databases and non-relational databases. Non-relational databases can include distributed databases based on blockchain, etc., without limitation. The processors involved in the embodiments provided in the present application can be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, data processing logics based on quantum computing, etc., without limitation.

[0128] The technical features of the above embodiments can be combined arbitrarily. For the sake of brevity of description, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, it should be considered as the scope described in this specification.

[0129] The above-described embodiments merely represent several implementation manners of the present application. The description thereof is relatively specific and detailed, but it should not be construed as a limitation on the patent scope of the present application. It should be noted that for those of ordinary skill in the art, without departing from the concept of the present application, several modifications and improvements can still be made, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the appended claims.

Claims

1. A component information processing method, characterized in that: The method comprises: Obtain the client program files and component association library of the target website; Extracting component feature information in the client program file according to the component association relationship library; The server-side component of the target website is determined according to the component feature information and the component association relationship library.

2. The method according to claim 1, characterized in that The server-side component includes a first server-side component and a second server-side component; the determining the server-side component of the target website according to the component feature information and the component association relationship library includes: Determining the first server-side component of the target website according to the component characteristic information; The component association library is queried to obtain the second server-side component; wherein the existence of the first server-side component is a sufficient condition for the existence of the second server-side component.

3. The method according to claim 1, characterized in that The client program file includes a client source program file and a server response file; extracting component feature information in the client program file according to the component association relationship library includes: Identify the website fingerprint information recorded in the component association library in the client source program file and the server response file; Determining, according to the component association relationship library, associated feature information associated with the website fingerprint information; The website fingerprint information and the associated feature information are combined to obtain component feature information.

4. The method according to claim 1, characterized in that: The method further comprises: Selecting a corresponding security verification method according to the component type of each of the server-side components; The security verification method is used to perform security verification on the server-side component.

5. The method according to claim 4, characterized in that After the security verification method is used to perform security verification on the server component, the method further includes: In the case where the component type of the server-side component is a database type, determining a network segment range where the server-side component is located; Scanning target components within the network segment according to the component feature information corresponding to the server-side component; The security verification method is used to perform security verification on the target component.

6. The method according to claim 5, characterized in that The method further comprises: Generating component display information of the target website according to the server-side component and the verification result of the security verification; Output the component display information.

7. A component information processing device, characterized in that: The device comprises: A data acquisition module is used to acquire the client program files and component association relationship library of the target website; A feature extraction module, used to extract component feature information in the client program file according to the component association relationship library; The component analysis module is used to determine the server-side component of the target website based on the component feature information and the component association relationship library.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images