会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 1. 发明申请
    • METHOD AND APPARATUS FOR WEBSITE SCANNING
    • 网站扫描的方法和设备
    • US20130227640A1
    • 2013-08-29
    • US13821867
    • 2011-09-08
    • Da ZhouXiaoming WangMing LvHui JiangGuangxu LiuXiaohai LuNa LiLiang LuJingjing Zeng
    • Da ZhouXiaoming WangMing LvHui JiangGuangxu LiuXiaohai LuNa LiLiang LuJingjing Zeng
    • H04L29/06
    • H04L63/1433H04L63/1483H04L67/02
    • Described is a website scanning apparatus comprising a policy analysis device for determining whether a link in a target website belongs to a known web application used by the target website. If the link belongs to the identified web application, then a vulnerability scanning is not performed on the link; a crawler device for obtaining the link content that the link points to; a web application identification device for determining whether the link belongs to a known web application; a full scan device for performing a full vulnerability scanning on a link determined as not belonging to the known web application; and a known web application vulnerability detection device for performing vulnerability detection for the identified web application according to known vulnerabilities to determine whether the known vulnerabilities exist in the website. A website scanning method employed by the website scanning apparatus is also described.
    • 描述了一种网站扫描装置,包括用于确定目标网站中的链接是否属于目标网站使用的已知网络应用的策略分析装置。 如果链接属于所识别的Web应用程序,则不会在链接上执行漏洞扫描; 用于获得链接指向的链接内容的履带装置; 用于确定所述链路是否属于已知网络应用的网络应用识别装置; 用于在被确定为不属于已知网络应用的链路上执行完整的漏洞扫描的全扫描设备; 以及已知的Web应用漏洞检测设备,用于根据已知的漏洞执行针对所识别的Web应用的漏洞检测,以确定网站中是否存在已知的漏洞。 还描述了网站扫描装置采用的网站扫描方法。
    • 3. 发明申请
    • WEBSITE SCANNING DEVICE AND METHOD
    • 网站扫描设备和方法
    • US20130276126A1
    • 2013-10-17
    • US13878955
    • 2011-10-21
    • Da ZhouXiaoming WangMing LvHui JiangGuangxu LiuXiaohai LuNa LiXing Ye
    • Da ZhouXiaoming WangMing LvHui JiangGuangxu LiuXiaohai LuNa LiXing Ye
    • H04L29/06
    • H04L63/1433G06F21/577G06F21/6209G06F2221/2119H04L63/1483H04L63/168H04L67/02
    • The invention discloses a website scanning apparatus for performing a security vulnerability scanning on a target website, which apparatus comprises: a web page obtaining component obtaining current content and/or features of a web page corresponding to a link to be processed; a link processing component including a change judgment device for judging whether the web page corresponding to the link to be processed has been changed based on stored web page content and/or features corresponding to the link to be processed as well as the current web page content and/or features of the link to be processed; and a vulnerability detecting component for performing a security vulnerability detection on a web page corresponding to a link to be processed for which the web page has been changed. The invention also discloses a website scanning method corresponding thereto.
    • 本发明公开了一种用于在目标网站上执行安全漏洞扫描的网站扫描装置,该装置包括:获取与要处理的链接相对应的网页的当前内容和/或特征的网页获取组件; 一种链接处理部件,包括:变更判断装置,用于基于所存储的网页内容和/或与要处理的链接相对应的特征以及当前网页内容来判断与要处理的链接相对应的网页是否已被改变 和/或要处理的链接的特征; 以及漏洞检测组件,用于在与要处理的链接相对应的网页上执行安全漏洞检测,网页已被改变。 本发明还公开了一种与其对应的网站扫描方法。