Vulnerability mining detection method, server, device and system

Abstract

The invention discloses a vulnerability mining detection method, server, device and system. The method comprises the following steps: acquiring suspicious sample logs uploaded by clients; performing duplication elimination on the acquired suspicious sample logs; and inputting suspicious sample logs left after duplication elimination into a sandbox, performing scanning to obtain a scanning log, and determining whether samples corresponding to the suspicious sample logs have vulnerabilities or not according to the scanning log. In the scheme, the clients are taken as probes spreading all over the Internet to collect the suspicious sample logs corresponding to suspicious files, so that relevant information of the samples in which vulnerabilities exist possibly in the Internet can be mined comprehensively. Then, samples in which security vulnerabilities exist really are determined from the samples in which the vulnerabilities exist possibly according to the scanning log, so that actual security situations of the samples are determined. Scanning is performed in the sandbox on a server side, so that an enclosed running environment is provided for the suspicious sample logs, and the security of the server side in a detection process is ensured.

Description

technical field [0001] The present invention relates to the technical field of the Internet, in particular to a vulnerability mining and detection method, server, device and system. Background technique [0002] With the continuous development of Internet technology, people use the Internet more and more frequently. Through the Internet, various matters such as work, study, life, and entertainment can be carried out, which brings great convenience to people. However, there are loopholes in many files used by people in the process of using the Internet. The loopholes in these files give malicious developers an opportunity. Malicious developers can use the loopholes in these files to attack the client where the files are located. Obtaining the personal information of the client users threatens the information security of the client users and causes losses to the users in terms of personal and property. [0003] Therefore, how to effectively and comprehensively mine and detect...

AI Technical Summary

Problems solved by technology

However, there are loopholes in many files used by people in the process of using the Internet. The loopholes in these files give malicious developers an opportunity. Malicious developers can use the loopholes in these files to attack the client where the files are located. Obtaining the personal information of the client users, threatening the information security of the client users, and causing losses to the users in terms of personal and property

Images