VULNERABILITY DETECTION METHOD AND APPARATUS, ELECTRONIC DEVICE, AND COMPUTER-READABLE STORAGE MEDIUM
A vulnerability detection method and apparatus, a device, and a computer-readable storage medium. Said method comprises: in case of acquiring a code block for implementing a first processing logic, acquiring a data access request, the first processing logic representing a processing logic for cipher...
Saved in:
Main Author | |
---|---|
Format | Patent |
Language | Chinese English French |
Published |
07.04.2022
|
Subjects | |
Online Access | Get full text |
Cover
Loading…
Summary: | A vulnerability detection method and apparatus, a device, and a computer-readable storage medium. Said method comprises: in case of acquiring a code block for implementing a first processing logic, acquiring a data access request, the first processing logic representing a processing logic for cipher-block chaining (CBC) encryption and decryption, and the data access request carrying an initialization vector (IV) used in a CBC encryption and decryption process (201); in case of adjusting the value of first (n-m-1) bytes of the IV to a first preset value, performing a brute force attack on the value of an (n-m)th byte to an nth byte of the IV, n being the number of bytes of the IV, and m being 0 to n-2 (202); and in the process of performing a brute force attack on the value of the (n-m)th byte to the nth byte of the IV, acquiring response information of the data access request, and detecting whether a vulnerability exists according to the response information (203).
L'invention concerne un procédé et un appare |
---|---|
Bibliography: | Application Number: WO2021CN120771 |