Web vulnerability scanning method, device and system

Abstract

The invention discloses a WEB vulnerability scanning method, apparatus and system for at least solving the problem that the network information security of internet users is threatened due to the overlong interval time between the discovery and identification of vulnerabilities in the prior art. The WEB vulnerability scanning method comprises the following steps: obtaining and storing a vulnerability scanning tool provided by a vulnerability detection terminal, wherein the vulnerability scanning tool is an extensible scanning tool programmed for a specific website vulnerability; determining the applicable vulnerability type of the vulnerability scanning tool provided by the vulnerability detection terminal, and displaying the vulnerability scanning tool provided by the vulnerability detection terminal and the applicable vulnerability type; obtaining a vulnerability scanning tool selection request sent by a to-be-detected website, and determining the vulnerability scanning tool corresponding to the vulnerability scanning tool selection request; and scanning the to-be-detected website through the vulnerability scanning tool corresponding to the vulnerability scanning tool selection request.

Description

technical field [0001] The present invention relates to the field of communication technology, in particular to a method, device and system for scanning WEB vulnerabilities. Background technique [0002] At present, with the development of the Internet, there will inevitably be loopholes in web programs or websites. Hackers often use network loopholes to steal corporate secret information and Internet users' private information, etc., posing a threat to Internet information security. [0003] In the process of implementing the embodiments of the present invention, the inventors have found that there are at least the following problems in the prior art: at present, the discovery of vulnerabilities basically uses scanning tools or hardware scanning devices, but whether it is scanning tools or hardware scanning devices, all Based on the process of "analyzing vulnerabilities—extracting vulnerability identification features—turning into a vulnerability scanning library—upgrading"...

AI Technical Summary

Problems solved by technology

[0002] At present, with the development of the Internet, there will inevitably be loopholes in web programs or websites. Hackers often use network loopholes to steal corporate secret information and Internet users’ private information, posing a threat to Internet information security.

[0003] In the process of implementing the embodiments of the present invention, the inventors have found that there are at least the following problems in the prior art: at present, the discovery of vulnerabilities basically uses scanning tools or hardware scanning devices, but whether it is scanning tools or hardware scanning devices, all Based on the process of "analyzing vulnerabilities—extracting vulnerability identification features—turning into a vulnerability scanning library—upgrading", it will take a long time from the discovery of vulnerabilities to the identification of vulnerabilities, for example, it often takes 1 to 3 months or even It takes a longer time, but in reality there are more and more vulnerabilities-based attacks, and the long time lag between vulnerability discovery and vulnerability identification often causes corporate databases to be dragged and user information leaked. information security poses a significant risk

Images