CN106980790A - A kind of safe emergency response platform and its security breaches detection process system, method - Google Patents

Abstract

The present invention discloses a security emergency response platform and its security loophole detection and processing system and method. The platform includes: a security loophole detection and processing system, which is used to provide an interface to acquire externally After the security vulnerability information is analyzed and processed, and the security vulnerability is repaired; the reward module, after the security vulnerability detection and processing system analyzes and processes the submitted security vulnerability information, according to the analysis result, submits the security vulnerability information Users who submit security vulnerability information are rewarded; the sharing interactive module is used to provide a way for users who submit security vulnerability information to share corresponding information. The invention can improve the maintenance efficiency of website safety loopholes and reduce labor costs.

Description

A security emergency response platform and its security vulnerability detection and processing system and method

technical field

The invention relates to the technical field of network security, in particular to a security emergency response platform and a security loophole detection and processing system and method thereof.

Background technique

With the development of Internet technology, people's daily life is more and more closely related to the Internet, and various network platforms, such as online shopping platforms, have penetrated into people's lives. However, as networked life has become a part of the daily life of the public, network security has been paid more and more attention by people. Due to the existence of various security risks in the network, such as cross-site scripting attacks, security holes, etc., these are always threatening the information security of network users, and make users worry all the time.

At present, in order to protect the information security of network users, each website, such as an online shopping platform, adopts a special central organization for unified maintenance of security vulnerabilities, that is, manually collects security issues, organizes special personnel to verify and verify vulnerability issues, conducts Vulnerability archiving, etc. However, these maintenance tasks require a lot of manpower and time, so the maintenance efficiency of security vulnerabilities is low, and the labor cost for maintenance is relatively high.

Contents of the invention

In order to overcome the deficiencies in the prior art above, the purpose of the present invention is to provide a security emergency response platform and its security loophole detection and processing system and method, so as to improve the maintenance efficiency of website security loopholes and reduce labor costs.

In order to achieve the above and other purposes, the present invention proposes a safety emergency response platform, including:

A security vulnerability detection and processing system, which is used to provide an interface to obtain externally input security vulnerability information, analyze and process the security vulnerability information after obtaining the security vulnerability information, and perform security vulnerability repair;

A reward module, after the security vulnerability detection and processing system analyzes and confirms the submitted security vulnerability information, rewards the user who submitted the security vulnerability information according to the analysis result;

The sharing interactive module is used to provide a way for users who submit security vulnerability information to share corresponding information.

Further, the platform also includes a ranking module, after the security vulnerability detection and processing system analyzes and confirms the submitted security vulnerability information, assigns corresponding contribution values to users who submit the security vulnerability information according to the analysis results, and according to The contribution value ranks all users.

Further, the security vulnerability detection and processing system is used to receive security vulnerability information input by external personnel, including selecting the type of vulnerability, the degree of damage of the vulnerability, and filling in the detailed description information of the vulnerability.

To achieve the above object, the present invention also provides a security vulnerability detection and processing system, including:

A request unit, configured to receive a user's request for submitting a security vulnerability;

The identity verification unit provides identity verification of the current user when receiving the user's security vulnerability submission request;

The security vulnerability detection and submitting unit provides the user with input of security vulnerability information when the identity verification unit passes the authentication of the user, and submits the security vulnerability to the vulnerability analysis unit after the user completes the input of the security vulnerability information;

Vulnerability analysis unit, which analyzes the security vulnerability information submitted by users, and generates suggestions for vulnerability repair and processing;

The repair processing unit repairs the security hole according to the vulnerability repair processing suggestion generated by the vulnerability analysis unit.

Further, the security breach detection and processing system further includes an identity registration unit, configured to provide identity information registration for new users.

Further, the security vulnerability detection and submitting unit acquires security vulnerability information including vulnerability type, vulnerability degree of vulnerability, and vulnerability detailed description information.

In order to achieve the above object, the present invention also provides a security vulnerability detection processing method, comprising the following steps:

Step 1, receiving the user's security vulnerability submission request;

Step 2, when receiving the user's security vulnerability submission request, provide the current user's identity verification;

Step 3: Provide the user with input of security vulnerability information when the user is authenticated, and submit the security vulnerability after the user completes the input of the security vulnerability information;

Step 4, analyze the security vulnerability information submitted by the user, and generate a suggestion for vulnerability repair;

In step five, the security vulnerability is repaired according to the generated vulnerability repair suggestion.

Further, after step 4, a step of rewarding users who submit the security vulnerability information according to the analysis results is also included.

Further, after step 4, it also includes a step of assigning corresponding contribution values to users who submit the security vulnerability information according to the analysis results, and ranking all users according to the contribution values.

Further, in step 2, when the user's security vulnerability submission request is received, when the user is a new user, the user is provided with the identity information registration of the new user.

Compared with the prior art, the present invention provides a security emergency response platform and its security loophole detection and processing system and method by providing a platform to collect external security experts to detect security loopholes, analyze the security loopholes and perform repair processing, which can improve the security of the website. The maintenance efficiency of security holes reduces labor costs.

Description of drawings

Fig. 1 is a system architecture diagram of the safety emergency response platform of the present invention;

Fig. 2 is a schematic structural diagram of a security loophole detection and processing system of the present invention;

The functional structural diagram of the security emergency response platform of the specific embodiment of the present invention of Fig. 3;

Fig. 4 is a flow chart of the steps of the security vulnerability detection processing method of the present invention;

Fig. 5 is a flow chart of the steps of vulnerability submission in a specific embodiment of the present invention;

Fig. 6 is a flow chart of steps for new user registration in a specific embodiment of the present invention.

detailed description

The implementation of the present invention is described below through specific examples and in conjunction with the accompanying drawings, and those skilled in the art can easily understand other advantages and effects of the present invention from the content disclosed in this specification. The present invention can also be implemented or applied through other different specific examples, and various modifications and changes can be made to the details in this specification based on different viewpoints and applications without departing from the spirit of the present invention.

FIG. 1 is a system architecture diagram of a safety emergency response platform of the present invention. As shown in FIG. 1 , a security emergency response platform of the present invention includes: a security vulnerability detection and processing system 10 , a reward module 11 , a ranking module 12 and a sharing and interaction module 13 .

Among them, the security vulnerability detection and processing system 10 is used to provide an interface to obtain security vulnerability information input from the outside. The interface provides external personnel to input security vulnerability information including selecting the type of vulnerability, the degree of vulnerability, and filling in the detailed description information of the vulnerability. After obtaining the security information of the vulnerability, the information of the security vulnerability is analyzed and processed, and repair work is performed. In the specific embodiment of the present invention, the external personnel refer to external security experts or white hats who have a sense of justice and are capable.

The reward module 11, after the security vulnerability detection and processing system 10 analyzes and confirms the submitted security vulnerability information, rewards the user who submitted the security vulnerability information according to the analysis result. In a specific embodiment of the present invention, the reward can be directly given Cash rewards can also reward corresponding points, and provide points exchange channels, for example, through gift shopping malls, users can exchange corresponding gifts according to points.

Ranking module 12, after the security vulnerability detection and processing system 10 analyzes and confirms the submitted security vulnerability information, assigns corresponding contribution values to users who submit the security vulnerability information according to the analysis results, and ranks all users according to the contribution values, To reflect the personal honor of users who submit security vulnerability information, and encourage more external personnel to participate in the detection of security vulnerabilities.

The sharing interaction module 13 is used to provide a way for users who submit security vulnerability information to share corresponding information. In a specific embodiment of the present invention, the sharing interaction module 13 can provide users with special sharing of security articles through a blog channel, and provide a communication platform to form a good security technology sharing atmosphere.

FIG. 2 is a schematic structural diagram of a security breach detection and processing system 10 of the present invention. As shown in FIG. 2 , the security vulnerability detection and processing system 10 of the present invention includes: a request unit 101 , an identity verification unit 102 , a security vulnerability detection submission unit 103 , a vulnerability analysis unit 104 and a repair processing unit 105 .

Wherein, the requesting unit 101 is configured to receive a user's security vulnerability submission request. In a specific embodiment of the present invention, when the user clicks a vulnerability submission entry on a web page, the user's security vulnerability submission request is received.

The identity verification unit 102 provides identity verification for the current user when receiving the user's security vulnerability submission request. In a specific embodiment of the present invention, the identity verification unit 102 realizes the identity verification of the user by providing the user name and the corresponding password input by the user. Preferably, the present invention further includes an identity registration unit for providing identity information registration of a new user, that is, when the user is a new user, the identity information registration of the new user can be performed through the identity registration unit.

The security vulnerability detection and submitting unit 103 provides the user with input of security vulnerability information when the identity verification unit 102 passes the authentication of the user, and submits the security vulnerability to the vulnerability analysis unit 104 after the user finishes inputting the security vulnerability information. In a specific embodiment of the present invention, the security vulnerability detection and submission unit 103 provides the user with information on the web interface to select the type of vulnerability, the degree of vulnerability and fill in the details of the vulnerability. After the user completes the input of the relevant security vulnerability information, click the corresponding button Then the input security vulnerability information may be submitted.

The vulnerability analysis unit 104 analyzes the security vulnerability information submitted by the user, and generates a suggestion for repairing the vulnerability.

The specific implementation method may be to construct the characteristic character of the vulnerability according to the received vulnerability information, wherein the characteristic character is generated according to the type of the vulnerability; based on the characteristic character, obtain the response information of the vulnerability and according to the response information Check the validity of the vulnerability.

The repair processing unit 105 performs repair processing on the security hole according to the vulnerability repair processing suggestion generated by the vulnerability analysis unit.

The specific implementation method can be loading the update file of the vulnerability; parsing the update file to obtain the patch information in the update file; repairing the functional modules corresponding to the patch information in the webpage to repair all stated loopholes.

Preferably, the vulnerability analysis unit 104 is configured to construct the characteristic character of the vulnerability according to the URL of the website with the vulnerability and the vulnerability test string corresponding to the vulnerability when the vulnerability is an information leakage type vulnerability; wherein, The vulnerability test string is a character string used to detect whether a vulnerability exists.

Preferably, the vulnerability analysis unit 104 is configured to use the URL of the vulnerability as the characteristic character of the vulnerability when the vulnerability is a SQL injection vulnerability.

Preferably, in the vulnerability analysis unit 104, the response information is used to describe whether there is a system call in the vulnerability to be fixed and information to describe whether there is a physical memory device in the vulnerability to be fixed.

Fig. 3 is a functional structural diagram of a safety emergency response platform according to a specific embodiment of the present invention. The security emergency response platform of the present invention will be described below through a specific embodiment. In the specific embodiment of the present invention, the platform uses a high-availability basic design to realize the network architecture of LVS+HAPROXY to ensure the smooth operation of the machine. In the case of a machine failure, the active and standby machines can be automatically switched to maximize The guarantee platform operates 7*24 hours. The core functions of the security emergency response center platform are mainly divided into the following 8 parts:

(1) Homepage:

The homepage of the platform intuitively shows the attitude of the security emergency response platform for open cooperation and communication. As the entrance of the platform, the homepage not only intuitively displays the core vulnerability receiving function of the platform, but also comprehensively displays several core functions of the platform, which is intuitive and clear. On the home page, the monthly rankings of the top three white hats (security vulnerability submitters) will be displayed directly, and the bulletin information will be scrolled at the same time, as well as the vulnerability receiving method at the bottom.

(2) Bulletin Board:

Visually display the latest developments of the platform, inform the latest developments of the platform at the first time, and maintain good interaction and publicity. The main content of the bulletin column is the notification of new regulations and detailed changes, the notification of bonus distribution, and the notification of daily activities.

(3) Vulnerability submission:

In addition to the regular vulnerability receiving, the scoring standard of related vulnerabilities is also visually displayed on the page, which not only informs users of the reward level of corresponding vulnerabilities at a glance, effectively improves users' enthusiasm for submitting vulnerabilities, but also provides an intuitive vulnerability score to a certain extent The standard publicity work makes the white hats more targeted when submitting vulnerabilities, and increases the stickiness between the platform and the white hats. The vulnerability submission function allows white hats to choose the type of vulnerability, the degree of vulnerability and fill in the detailed description information of the vulnerability. After clicking submit, the vulnerability information provided by the white hat will be submitted to the background of the security emergency response platform, and the background auditors will After seeing the vulnerability details, the processing personnel will start to conduct hazard analysis confirmation and repair work. After the vulnerability repair is completed, the security emergency response platform will give a certain cash reward according to the "Vipshop Security Vulnerability Handling Analysis Process Specification" and the degree of vulnerability damage. If a serious high-risk vulnerability is found, an additional generous cash reward will be given. Through the vulnerability information provided by these white hat security researchers, the present invention not only effectively suppresses the possibility of website vulnerabilities being exposed on third-party platforms, but also can effectively help website security engineers locate their own problems in order to better Good to suppress the next occurrence of a similar problem. In order to protect the information security of website members.

(4) Gift Mall:

As the page with the highest interaction frequency, users can not only exchange cash and other gifts directly through the website, but also add a wish list function to listen to the wishes of users and increase the enthusiasm and interaction between users and the website. Improve the attractiveness of the website itself, which in turn can attract more white hats to help the website's security vulnerabilities. Security coins are required to exchange gifts. Users submit security vulnerabilities, and the platform will give a corresponding amount of security coins after the review is passed. These security coins can be used to exchange gifts or cash.

(5) Celebrity list:

After the user submits a security vulnerability, the platform will give the corresponding contribution value according to the "Vipshop Security Vulnerability Handling Specification". In addition to the daily material rewards on the website, the celebrity list is an intangible reward that reflects personal honor. Usually, when a user submits a vulnerability, the staff will give a corresponding contribution value and security coin points after confirming that the vulnerability is harmful. The contribution value will directly affect the ranking on the leaderboard, and the security coin can be used for gift exchange. The top few users on the celebrity list can also get generous additional material rewards. Usually, the celebrity list gives users an honorary reward, and the corresponding contribution value also has a corresponding honorary title, which invisibly motivates users to strive for more contribution values.

(6) Blog:

The security emergency response platform of the present invention specially shares security articles through the blog channel, which not only effectively demonstrates the reserve of the security capability of the enterprise, but also forms a good interactive atmosphere among peers. At the same time, the platform also develops an external contribution column to actively absorb external wonderful articles, and there will also be corresponding rewards and rewards. Form a good security technology sharing atmosphere.

(7) Business scope:

The security emergency response platform conveys the core business and core concerns of the platform to the outside world through the business scope module.

(8) About us

The security emergency response platform of the present invention mainly displays partner and recruitment information through the "About Us" page, which reflects that the platform maintains a good spirit of interaction and cooperation with industry peers.

FIG. 4 is a flow chart of the steps of a method for detecting and processing a security breach according to the present invention. As shown in Figure 4, a kind of security loophole detection processing method of the present invention comprises the following steps:

Step 401, receiving the user's security vulnerability submission request, in a specific embodiment of the present invention, when the user clicks the vulnerability submission entry on the web page, the user's security vulnerability submission request is received;

Step 402, when receiving the user's security vulnerability submission request, provide the current user's identity verification, in a specific embodiment of the present invention, realize the user's identity verification by providing the user's input username and corresponding password;

Step 403 , when the identity verification of the user is passed, the user is provided with the input of the security vulnerability information, and after the user completes the input of the security vulnerability information, the security vulnerability is submitted. In a specific embodiment of the present invention, after the identity verification of the user is passed, the user can select the type of vulnerability, the degree of vulnerability and the description information of filling in the details of the vulnerability on the web interface. After the user completes the input of relevant security vulnerability information, click The corresponding button can submit the input security vulnerability information.

Step 404 , analyzing the security vulnerability information submitted by the user, and generating a suggestion for repairing the vulnerability.

The specific implementation method may be to construct the characteristic character of the vulnerability according to the received vulnerability information, wherein the characteristic character is generated according to the type of the vulnerability; based on the characteristic character, obtain the response information of the vulnerability and according to the response information Check the validity of the vulnerability.

Step 405, repairing the security hole according to the generated suggestion for repairing the vulnerability.

The specific implementation method can be loading the update file of the vulnerability; parsing the update file to obtain the patch information in the update file; repairing the functional modules corresponding to the patch information in the webpage to repair all stated loopholes.

Preferably, in step 402, when the user's security vulnerability submission request is received, when the user is a new user, the user is provided with the identity information registration of the new user.

Preferably, in step 404, when the vulnerability is an information leakage type vulnerability, construct the characteristic character of the vulnerability according to the URL of the website with the vulnerability and the vulnerability test string corresponding to the vulnerability; wherein, the vulnerability The test string is a string used to detect whether a vulnerability exists.

Preferably, in step 404, when the vulnerability is a SQL injection vulnerability, the URL of the vulnerability is used as the characteristic character of the vulnerability.

Preferably, in step 404, the response information is used to describe whether there is a system call in the vulnerability to be fixed and information to describe whether there is a physical memory device in the vulnerability to be fixed.

Preferably, after step 405, a step of rewarding users who submit the security vulnerability information is further included according to the analysis results.

Preferably, after step 405, a step of assigning corresponding contribution values to users who submitted the security vulnerability information according to the analysis results, and ranking all users according to the contribution values.

Fig. 5 is a flow chart of the steps of vulnerability submission according to the specific embodiment of the present invention. As shown in Figure 5, when the user enters the report vulnerability page, the user's request is received, and the user is provided with input authentication information; it is judged whether the user is logged in; If you forget your password, you can provide a way to retrieve the password, such as sending an email to retrieve the password. If you are a new user, provide new user information to register; when the user identity verification is passed, the user is provided to edit and submit security vulnerabilities.

Fig. 6 is a flow chart of steps for new user registration in a specific embodiment of the present invention. As shown in Figure 6, when a new user registers, it is judged whether the information entered by the user is correct and legal, and if so, an account activation email is sent, and the account is activated when the activation link is valid to complete the new user registration.

In summary, the present invention provides a security emergency response platform and its security vulnerability detection and processing system and method by providing a platform to collect external security experts to detect security vulnerabilities, analyze and repair the security vulnerabilities, and improve the security vulnerability of the website. High maintenance efficiency and reduced labor costs.

Any person skilled in the art can modify and change the above-mentioned embodiments without departing from the spirit and scope of the present invention. Therefore, the protection scope of the present invention should be listed in the claims.

Claims (10)

1. A security emergency response platform, comprising: A security vulnerability detection and processing system, which is used to provide an interface to obtain externally input security vulnerability information, analyze and process the security vulnerability information after obtaining the security vulnerability information, and perform security vulnerability repair; A reward module, after the security vulnerability detection and processing system analyzes and confirms the submitted security vulnerability information, rewards the user who submitted the security vulnerability information according to the analysis result; The sharing interactive module is used to provide a way for users who submit security vulnerability information to share corresponding information. 2. A kind of security emergency response platform as claimed in claim 1, it is characterized in that: described platform also comprises ranking module, after described security loophole detection processing system analyzes and confirms the security loophole information submitted, according to analysis result Assign corresponding contribution values to users who submit the security vulnerability information, and rank all users according to the contribution values. 3. A security emergency response platform as claimed in claim 1, characterized in that: the security vulnerability detection and processing system is used to receive input from external personnel, including selecting the type of vulnerability, the degree of hazard of the vulnerability, and filling in the security vulnerability of the detailed description information of the vulnerability information. 4. A security vulnerability detection and processing system, comprising: A request unit, configured to receive a user's request for submitting a security vulnerability; The identity verification unit provides identity verification of the current user when receiving the user's security vulnerability submission request; The security vulnerability detection and submitting unit provides the user with input of security vulnerability information when the identity verification unit passes the authentication of the user, and submits the security vulnerability to the vulnerability analysis unit after the user completes the input of the security vulnerability information; Vulnerability analysis unit, which analyzes the security vulnerability information submitted by users, and generates suggestions for vulnerability repair and processing; The repair processing unit repairs the security hole according to the vulnerability repair processing suggestion generated by the vulnerability analysis unit. 5. A security breach detection and processing system according to claim 4, characterized in that: said security breach detection and processing system further comprises an identity registration unit for providing identity information registration of new users. 6 . The security vulnerability detection and processing system according to claim 4 , wherein the security vulnerability detection and submitting unit acquires security vulnerability information including vulnerability type, vulnerability degree of vulnerability and vulnerability detailed description information. 7 . 7. A method for detecting and processing security vulnerabilities, comprising the steps of: Step 1, receiving the user's security vulnerability submission request; Step 2, when receiving the user's security vulnerability submission request, provide the current user's identity verification; Step 3: Provide the user with input of security vulnerability information when the user is authenticated, and submit the security vulnerability after the user completes the input of the security vulnerability information; Step 4, analyze the security vulnerability information submitted by the user, and generate a suggestion for vulnerability repair; In step five, the security vulnerability is repaired according to the generated vulnerability repair suggestion. 8. A security vulnerability detection and processing method according to claim 7, characterized in that: after step 4, further comprising a step of rewarding users who submit the security vulnerability information according to the analysis results. 9. A method for detecting and processing security vulnerabilities as claimed in claim 7, characterized in that: after step 4, it also includes assigning corresponding contribution values to users who submit the security vulnerability information according to the analysis results, and according to the contribution values Steps to rank all users. 10. A method for detecting and processing security vulnerabilities as claimed in claim 7, characterized in that: in step 2, when receiving the user's security vulnerability submission request, when the user is a new user, provide the user with a new user Identity information registration.