Security verification defect detection method and device and electronic equipment

Abstract

The invention provides a security verification defect detection method and device, and electronic equipment, and relates to the field of communications. The method comprises the steps: receiving an encrypted connection establishment request sent by a functional module in a client; establishing encrypted connection with the function module based on the encrypted connection establishment request soas to detect whether the function module has a security verification defect; if the encrypted connection establishment fails, forwarding the data between the functional module and the server in a transparent transmission mode, so as to ensure that after the functional module and the server communicate normally; starting other functional modules associated with the functional module in operation inthe client to operate to perform security verification defect detection. According to the invention, it can be ensured that security verification defect detection can be carried out on each functional module associated with client side operation.

Description

technical field [0001] The disclosure provides a security verification defect detection method, device and electronic equipment, and relates to the communication field. Background technique [0002] A device or application program (APP) can call many software package development tools (Software Development Kit, SDK) modules to realize its functions, and the communication between the modules and the server can be based on the Transport Layer Security protocol (Transport Layer Security, TLS) or data packet transport layer Security protocols (Datagram TransportLayer Security, DTLS) etc. establish encrypted connections for communication, and there may be security verification flaws when establishing encrypted connections for communication based on tls or dtls. [0003] Currently, man-in-the-middle attacks can be used to detect whether the module has security verification defects. Specifically, whether the module has security verification defects can be judged by whether the encr...

AI Technical Summary

Problems solved by technology

[0003] Currently, man-in-the-middle attacks can be used to detect whether the module has security verification defects. Specifically, whether the module has security verification defects can be judged by whether the encrypted connection between the module and the "man-in-the-middle" is successfully established. However, due to the Each module has a dependency relationship in oper

Images