Dynamic instrumentation website server sensitive information leakage vulnerability detection method

• Main Authors: ZUO JIAHE, CHEN DANWEI, DAI CHENG, WANG TAIYU, LUO SHENGMEI
• Format: Patent
• Language: Chinese; English
• Published: 17.05.2024
• Subjects: CALCULATING; COMPUTER SYSTEMS BASED ON SPECIFIC COMPUTATIONAL MODELS; COMPUTING; COUNTING; ELECTRIC COMMUNICATION TECHNIQUE; ELECTRIC DIGITAL DATA PROCESSING; ELECTRICITY; PHYSICS; TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHICCOMMUNICATION

The invention discloses a dynamic instrumentation website server sensitive information leakage vulnerability detection method, and belongs to the field of network sensitive information detection. On the basis of a website source code, dynamic debugging is carried out by changing a server source code, a specific code is inserted in program execution, and a sensitive information detection algorithm based on a graph convolutional network is called, so that monitoring and analysis are realized, and sensitive information leakage is more accurately discovered. In the detection process, the code instrumentation position can be self-defined, a website source code cannot be changed, normal operation of the website cannot be affected, and long-term detection can be carried out in the normal service process of the website. And running the detection algorithm, comparing and classifying the trained model and the detection data, judging whether the transmitted information is sensitive information, and if so, intercepting.