基于规则过滤的机场网站漏洞自动化检测系统  

Automatic detection system of airport website vulnerability based on rule filtering

作　　者：宋健 张超 SONG Qunjian;ZHANG Qunchao(Engineering construction headquarters of Guangdong Airport Management Group Co.,Ltd.,Guangzhou 510440,China)

机构地区：[1]广东省机场管理集团有限公司工程建设指挥部,广州510440

出　　处：《自动化与仪器仪表》2023年第4期134-137,142,共5页Automation & Instrumentation

基　　金：广州白云国际机场三期扩建工程数据中心一期工程(by20-063-32-2021z)。

摘　　要：为了确保机场网站中的信息安全,需要及时检测并修复网站中存在的漏洞。针对目前机场网站漏洞检测系统中存在的问题,提出基于规则过滤的机场网站漏洞自动化检测系统设计方法,在系统硬件中设计了参数配置模块、网络爬虫模块、漏洞扫描模块和漏洞评价模块,在软件设计中引入了规则过滤方法,设置反过滤规则集,转变机场网站中的攻击代码,深度挖掘网站中存在的漏洞。实验结果表明,所提方法的漏洞类型检测全面、检测性能高、漏洞检测效率高。In order to ensure the information security in the airport website,it is necessary to detect and repair the vulnerabilities in the website in a timely manner.Aiming at the problems existing in the current airport website vulnerability detection system,this paper proposes a design method of automatic airport website vulnerability detection system based on rule filtering.In the system hardware,the parameter configuration module,web crawler module,vulnerability scanning module and vulnerability evaluation module are designed.In the software design,the rule filtering method is introduced,the anti filtering rule set is set,and the attack code in the airport website is transformed,Deep mining of vulnerabilities in websites.The experimental results show that the proposed method has comprehensive vulnerability type detection,high detection performance and high vulnerability detection efficiency.

关 键 词：规则过滤 机场网站漏洞 爬虫技术 漏洞扫描 系统设计 

分 类 号：TP391.1[自动化与计算机技术—计算机应用技术]