Mini Program Security Scanning via Multi-Dimensional Strategy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mini programs pose a security risk as they can be released to servers without adequate scanning, potentially containing malicious code or security loopholes, which can compromise user security if not properly vetted before distribution.
Innovation Solution
A multi-dimensional security scanning method and apparatus for mini programs that includes malicious code scanning, security loophole scanning, and server interface loophole scanning, ensuring that only non-malicious programs are released to servers, thereby preventing the spread of malicious content.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If mini programs are released without comprehensive security scanning, then the release process is fast and simple, but malicious code and security loopholes can compromise user security
Solution Approach 1:
The security scanning process is divided into multiple independent scanning strategies including malicious code scanning, security loophole scanning, and server interface loophole scanning. Each scanning strategy operates as a separate module that can be independently configured and executed, allowing comprehensive security checking while maintaining modular architecture that manages complexity.
Solution Approach 2:
The patent implements preliminary security scanning before mini programs are released to servers. By performing comprehensive security checks in advance including malicious code detection, security loophole identification, and interface vulnerability scanning, the system prevents malicious content from being distributed while maintaining a streamlined release process for programs that pass security checks.
2Reliability
If multi-dimensional security scanning is performed on all mini programs, then security coverage is comprehensive, but the scanning time and processing overhead increase
Solution Approach 1:
The system implements a multi-dimensional security scanning strategy that applies different scanning depths and types based on risk assessment. Not all mini programs undergo the full spectrum of scanning operations - the system selectively applies scanning strategies based on program characteristics, allowing comprehensive security coverage for high-risk programs while reducing scanning overhead for low-risk programs.
Solution Approach 2:
The security scanning process is divided into multiple independent scanning strategies including malicious code scanning, security loophole scanning, and server interface loophole scanning. Each scanning strategy operates as a separate module that can be independently configured and executed, allowing comprehensive security checking while maintaining modular architecture that manages complexity.
3Object-affected harmful factors
If comprehensive security scanning strategies are implemented, then malicious content is effectively blocked, but the system complexity and resource consumption increase
Solution Approach 1:
The security scanning process is divided into multiple independent scanning strategies including malicious code scanning, security loophole scanning, and server interface loophole scanning. Each scanning strategy operates as a separate module that can be independently configured and executed, allowing comprehensive security checking while maintaining modular architecture that manages complexity.
Solution Approach 2:
The security scanning system is designed with universal scanning strategies that can handle multiple types of threats through a unified framework. The same scanning infrastructure supports malicious code detection, security loophole identification, and interface vulnerability scanning, reducing overall system complexity while maintaining comprehensive security coverage.
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
The present description provides a security scanning method for a mini program, comprising: obtaining a target mini program to be released, invoking a security scanning strategy combination to perform multi-dimensional security scanning on the target mini program; and when the target mini program passes the multi-dimensional security scanning, releasing the target mini program to a server corresponding to a target APP with which the target mini program is carried.