Network equipment vulnerability detection method

Abstract

The invention relates to the technical field of network vulnerability detection, in particular to a network equipment vulnerability detection method, which comprises the following steps of: (1) IP scanning: scanning an IP network segment configured by network equipment; (2) routing detection: detecting IP addresses in an active IP list; (3) routing vulnerability scanning: judging whether the detected equipment has security weakness or not; (4) automatic vulnerability utilization: carrying out active vulnerability utilization on the network equipment with the vulnerability; (5) automatic decryption: decrypting a password detected via the vulnerability; (6) detection reporting: a complete detection report on detection results of a detected network segment is generated. Loopholes of the network equipment such as a router and a switch are automatically detected and accurately recognized, the detection time is greatly shortened, manpower and time are saved, and the safety of the network equipment is effectively improved.

Description

technical field [0001] The invention relates to the technical field of network loophole detection, and the specific field is a detection method for network equipment loopholes. Background technique [0002] With today's increasingly prominent international Internet information security issues, strengthening domestic network security management has become a top priority. At present, there are various means of network attack, and most network managers focus on the security protection of clients and servers, but ignore the security protection of network devices. At this stage, more and more vulnerabilities exist in network devices (including routers, switches, firewalls, printers), and daily managers usually ignore the security configuration and update of network devices, which makes a large number of network devices The door is wide open for attackers in the network. [0003] For now, Huawei, H3C, Cisco and other network equipment are the most widely used in the domestic...

AI Technical Summary

Problems solved by technology

[0012] In view of the prior art, there are few automatic detection methods for loopholes in network equipment such as routers and switches, and they are not targeted, and cannot detect and identify network equipment with loopholes. Manual detection is time-consuming and labor-intensive. The purpose of the present invention is to provide A detection method of network equipment vulnerability

Images