9 results about "Vulnerability scanner" patented technology

The invention relates to a webpage API (Application Program Interface) depth discovery method, which comprises the following steps of: injecting a self-defined JS (JavaScript) code into a chromium browser which is started in a headless mode, triggering a webpage event and realizing request interception and hijack monitoring, and gradually triggering and completely traversing a functional process aiming at DOM0 and DOM2 events in the webpage code, meanwhile, a specific execution result is returned through a special DOM event of a HOOK part, the webpage is locked to avoid jumping in the triggering process, the DOM event on the webpage is triggered as completely as possible with the assistance of a field automatic filling function, and meanwhile, URL requests of webpage event functions are recorded and summarized. Compared with the prior art, the method has higher API discovery capability; according to the model, a browser event triggering and function HOOK technology method is adopted, the problems that a vulnerability scanner discovers and captures webpage URL paths and APIs are missing and incomplete are well solved, and the capacity of discovering the APIs and the vulnerabilities in the field of automatic vulnerability discovering is improved.

The application provides a network security risk intelligent evaluation system and relates to the technical field of network security, which comprises a leak scanning capability evaluator, a leak scanning capability scheduler, a vulnerability scanner, a capability verification server and a target network. The leak scanning capability evaluator acquires network information of the target network and informs the leak scanning capability scheduler to create a projection environment according to the network information. The vulnerability scanner is called to perform vulnerability scanning on the projection environment and submit a first leak scanning report of the projection environment. The capability of each vulnerability scanner is evaluated according to the first leak scanning report. The leak scanning capability scheduler calls corresponding vulnerability scanners to scan the target network according to a vulnerability scanning combination scheme and submits a second leak scanning report to the leak scanning capability evaluator. Through the evaluation of the vulnerability detection efficiency and quality, the method for improving the vulnerability detection efficiency and quality by formulating the arrangement and calling strategy of various available leak scanning systems is realized, and the leak scanning quality and efficiency are effectively improved.

The invention relates to the technical field of network security, and discloses a heterogeneous vulnerability scanner scheduling method and system based on an intelligent scheduling strategy, and the method comprises the steps: connecting different vulnerability scanners, carrying out the service registration and state monitoring through a unified API gateway, and collecting the operation indexes of all scanners in real time; setting a scanning scheduling strategy to allocate scanning tasks to scanners for execution, and obtaining task execution results; and obtaining scanning result data of each scanner, and generating a vulnerability scanning report. According to the invention, centralized scheduling management can be carried out uniformly, the utilization rate of the vulnerability scanner is improved, the scanning missing channel monitoring capability is provided, and when the content of our unit cannot be processed due to overtime unprocessed tasks or channel blockage, early warning is carried out in advance and related personnel of our unit are notified to process, so that the queuing waiting condition of users is relieved, and the user experience is improved. Different types of report data fusing heterogeneous scanning tasks are supported, a standardized scanning report is provided, and self-definition of a report format is supported.

The embodiment of the invention relates to the technical field of information, and discloses an interface security test method and device, a storage medium and a product, the interface security test method comprises the steps that a plurality of vulnerability detection plug-ins are constructed, the vulnerability detection plug-ins correspond to different interface security test categories, and the vulnerability detection plug-ins comprise basic principles of vulnerability types; obtaining interface information of the target interface and an interface associated with the target interface through the first intelligent agent; constructing a vulnerability scanning process through the first agent according to the interface information and the vulnerability arrangement information; performing vulnerability scanning on the target interface through the second agent according to the vulnerability scanning process to obtain a scanning result; therefore, by means of the endogenous ability of multiple agents, the workflow of a human penetration test engineer is simulated, through multi-step Web API calling, fine and meticulous vulnerability verification conforming to human thinking is achieved, the accuracy rate far higher than that of a traditional vulnerability scanner is achieved, and multiple vulnerability types difficult to cover by the traditional scanner can be covered.

This disclosure provides a method, device, and medium for vulnerability rule generation and verification based on an intermediate component, relating to the field of computer technology, particularly artificial intelligence and network security. The specific implementation scheme includes: running the simulation environment constructed through the intermediate component; converting a vulnerability scanner tool template into an executable vulnerability detection service within the simulation environment, wherein the vulnerability detection service is a simulated service executed by a vulnerable web server; generating vulnerability detection rules in the simulation environment based on the vulnerability scanner tool template; and verifying the validity of the rules in the simulation environment based on the vulnerability detection rules and the vulnerability detection service.

An exploit assessment and pentesting program tests assets of a network being protected by an ASM cloud platform against known CVE. The vulnerability scanner performs pentesting by selecting CVE test templates from the database of CVE test templates and running the CVE test templates to conduct one or more common vulnerabilities and exposures tests on an asset to see whether the asset is actually vulnerable or not. The vulnerability scanner can cooperate with at least one of a user interface, a display, and a report generator to both i) report a results of the augmented pentesting on the assets of the network as well as ii) present an attack surface of the assets of the network being protected by the ASM cloud platform detected by the exploit assessment and pentesting program in order to show actual CVE risks present in the assets in the network.

Techniques for deploying and using offense-type network vulnerability scanners are disclosed herein. Network vulnerability scanners can be deployed at multiple locations in a network. The network vulnerability scanners can cause equipment with external connections to the network, such as user equipment which is configured for testing purposes, or other device(s) with or without external network connections to perform network vulnerability test operations. The network vulnerability test operations can expose network vulnerability information associated with external connections of the user equipment to the network.

The application relates to a novel power system APT attack graph generation method based on a GD-DQN algorithm, first, based on a novel power system network topology structure, network vulnerability scanners are used for scanning detection to generate vulnerability information of the novel power system; second, an intelligent agent in the GD-DQN algorithm is used for carrying out vulnerability state scanning on the vulnerability information to form network perception T of the novel power system environment; and then, the intelligent agent constructs an attack graph through a training process according to the network perception T. In the application, the intelligent agent in the GD-DQN algorithm is used to improve the efficiency and scale of attack graph generation, and the attack graph can be dynamically and real-timely generated; the Dueling DQN algorithm is introduced, each learning process of the intelligent agent does not necessarily depend on other learning scenes; the GRU model is introduced, the intelligent agent achieves better training effect, and a better attack path can be obtained.

Systems, computer program products, and methods are described herein for tracking virtual machine image vulnerabilities in a distributed network. The present disclosure is configured to identify a virtual machine (VM) image; apply the identified VM image to a VM vulnerability scanner; determine, by the VM vulnerability scanner, the VM image is safe from a list of known vulnerabilities; update, based on the VM vulnerability scanner, an approved repository with the VM image that is determined as safe from known vulnerabilities; generate, by a VM provisioning engine, at least one VM from the approved repository; identify at least one address identifier associated with the generated VM; and update the approved repository with the identified at least one address identifier and link the at least one address identifier to the associated VM image the generated VM is based on.