Detection device and method for security vulnerability of software

Abstract

The invention relates to the field of computers, in particular to a detection device and method for a security vulnerability of a dedicated information system. According to the detection device and method disclosed by the invention, a tester can not only access a target system to a testing network but also access the detection device to a production system by connecting a test terminal with the target system, wherein the target system is located in the production system. As the core of the detection device, a system security analysis and test management platform comprises a vulnerability discovering system, a vulnerability authenticating and analyzing system, a permeability testing system, a vulnerability library, a test case library, a report outputting system, a user and permission management system, a system management platform and the like. When the detection device and method for the security vulnerability of the software, provided by the invention, are adopted, the vulnerability can be found before the application of the software, and corresponding strategies can be provided, so that the detection device and method meet the requirement on the emphasis on information security in the current society in a better manner; and moreover, the detection device and method have a higher application value.

Description

technical field [0001] The invention relates to the field of computers, in particular to a device and method for detecting security loopholes in large-scale design software. Background technique [0002] In the information age, network leaks are increasing, and network security is getting more and more attention. From state secrets to personal privacy, there are risks and threats from network leaks. On the Internet, it is often the case that Internet terminals are attacked by exploiting software loopholes. For example, how to avoid such incidents requires the detection of software vulnerabilities. At present, there is no effective means to completely eliminate such phenomena, but the security vulnerability detection of the software itself has become a means of avoiding similar incidents. Increasing attention has been paid. Contents of the invention [0003] The technical problem to be solved by the present invention is to provide a special application system software and g...

AI Technical Summary

Problems solved by technology

[0002] In the information age, network leaks are increasing, and network security is getting more and more attention. From state secrets to personal privacy, there are risks and threats from network leaks. On the Internet, it is often the case that Internet terminals are attacked by exploiting software loopholes. For example, how to avoid such incidents requires the detection of software vulnerabilities. At present, there is no effective means to completely eliminate such phenomena, but the security vulnerability detection of the software itself has become a means of avoiding similar incidents, which is increasingly valued.

Images