
基本信息:
- 专利标题: 一种非结构化数据库的风险排查装置
- 专利标题(英):Risk checking device for unstructured database
- 申请号:CN201911054278.6 申请日:2019-10-31
- 公开(公告)号:CN110837646A 公开(公告)日:2020-02-25
- 发明人: 常杰 , 左晓军 , 刘硕 , 郭禹伶 , 陈泽 , 侯波涛 , 刘伟娜
- 申请人: 国网河北省电力有限公司电力科学研究院 , 国家电网有限公司 , 国网河北能源技术服务有限公司
- 申请人地址: 河北省石家庄市体育南大街238号
- 专利权人: 国网河北省电力有限公司电力科学研究院,国家电网有限公司,国网河北能源技术服务有限公司
- 当前专利权人: 国网河北省电力有限公司电力科学研究院,国家电网有限公司,国网河北能源技术服务有限公司
- 当前专利权人地址: 河北省石家庄市体育南大街238号
- 代理机构: 石家庄新世纪专利商标事务所有限公司
- 代理人: 张杰; 徐瑞丰
- 主分类号: G06F21/57
- IPC分类号: G06F21/57
The invention discloses a risk checking device for an unstructured database, which is a software device for judging the version and the type of the unstructured database through port fingerprint identification and carrying out batch security detection on the unstructured database of the corresponding version, and the device is used for carrying out security detection on the unstructured database in a network. According to the invention, batch automatic detection of common vulnerabilities of unstructured databases such as redis, mongodb, memcache and the like is realized; the device can be applied to scenes such as online security evaluation and grade protection evaluation of various information systems, can effectively improve the security of the unstructured database, can be applied to network security check and vulnerability mining work, and can discover security vulnerabilities existing in the unstructured database of an important information system. For a system with vulnerabilities, network security professionals should give rectification suggestions in time: taking measures of offline rectification, customizing a WAF protection strategy, setting access control and the like, and eliminating potential safety hazards.
IPC结构图谱:
G | 物理 |
--G06 | 计算;推算;计数 |
----G06F | 电数字数据处理 |
------G06F21/00 | 防止未授权行为的保护计算机或计算机系统的安全装置 |
--------G06F21/10 | .保护分布式程序或内容,例如版权资料的出售或许可 |
----------G06F21/57 | ..确保或维持可信任的计算机平台,例如安全引导或断电、版本控制、系统软件检查、安全更新或评估漏洞 |