Vulnerability verification system based on POC verification engine

The invention relates to the technical field of network security, and discloses a vulnerability verification system based on a POC verification engine, which comprises a WEB front end, a WEB rear end, a POC library and a POC verification engine, the WEB front end is used for acquiring user input dat...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: WANG JIAQUAN, WANG YIMENG, LIAO XI, DAI QIYI, SHAN JIWEI
Format: Patent
Sprache:chi ; eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:The invention relates to the technical field of network security, and discloses a vulnerability verification system based on a POC verification engine, which comprises a WEB front end, a WEB rear end, a POC library and a POC verification engine, the WEB front end is used for acquiring user input data and displaying a vulnerability verification result; the WEB rear end is used for receiving data input by a user; the POC library is used for storing POC files; the POC verification engine reads and loads the corresponding POC file from the POC library according to the user input data and executes the POC file to obtain a vulnerability verification result. The problems that an existing vulnerability verification and detection system can only passively detect and verify specific vulnerabilities and does not have universality and initiative are solved. 本发明涉及网络安全技术领域,公开了一种基于POC验证引擎的漏洞验证系统,包括:WEB前端、WEB后端、POC文库和POC验证引擎;WEB前端用于获取用户输入数据和展示漏洞验证结果;WEB后端用于接收用户输入数据;POC文库用于存放POC文件;POC验证引擎依据用户输入数据从POC文库中读取载入对应POC文件并执行得到漏洞验证结果。