Automatic vulnerability discovery system and method based on protocol reverse parsing

Abstract

The invention relates to an automatic vulnerability discovery system and method based on protocol reverse parsing. The automatic vulnerability discovery system comprises a protocol reverse parsing module and a fuzz testing module, wherein the protocol reverse parsing module comprises a message preprocessing module, a message classifying module, a message format extracting module and the like, and the fuzz testing module comprises a process monitoring module, a network monitoring module, an input control module, a session control module and the like. The automatic vulnerability discovery system further comprises a server side and a client side, wherein the server side comprises a process monitoring module and a network monitoring module, and the client side comprises a message preprocessing module, a message classifying module, a message format extracting module, an input control module and a session control module. By means of the automatic vulnerability discovery system and method based on the protocol reverse parsing, the automation degree and efficiency of network service software vulnerability discovery are improved, the dependence on manual operation of the protocol analysis process is reduced, meanwhile the demand for the authority limit of a target object is reduced, and an application range is widened.

Description

technical field [0001] The invention relates to an automatic loophole mining system and method based on protocol reverse analysis, and belongs to the technical field of computer Internet. Background technique [0002] With the rapid development of information technology and the continuous progress of society, the importance of information to modern society is self-evident, and the ensuing information security issues have become particularly prominent. As an important part of information security, network security is related to national security and social stability, and its importance has become increasingly prominent with the acceleration of global informatization. [0003] For a long time, software security vulnerabilities, especially security vulnerabilities of network service software, have been the main root cause of various network security incidents. The vast majority of network intrusions are based on security vulnerabilities of network service software. An importan...

AI Technical Summary

Problems solved by technology

[0007] The problem solved by the technology of the present invention: Aiming at the deficiency that the existing vulnerability mining technology is not highly automated and requires too high authority of the target object, an automated vulnerability mining system and method based on protocol reverse analysis is provided, which improves the efficiency of vulnerability mining. Efficiency and automation with reduced permission requirements on target objects

Images