张帆, 王振宇, 王红梅, 万月亮, 宁焕生, 李莎. 基于主动探测的Web容器探测识别方法[J]. 工程科学学报. DOI: 10.13374/j.issn2095-9389.2023.12.15.001
引用本文: 张帆, 王振宇, 王红梅, 万月亮, 宁焕生, 李莎. 基于主动探测的Web容器探测识别方法[J]. 工程科学学报. DOI: 10.13374/j.issn2095-9389.2023.12.15.001
Web Container Detection Method Based on Active Probing[J]. Chinese Journal of Engineering. DOI: 10.13374/j.issn2095-9389.2023.12.15.001
Citation: Web Container Detection Method Based on Active Probing[J]. Chinese Journal of Engineering. DOI: 10.13374/j.issn2095-9389.2023.12.15.001

基于主动探测的Web容器探测识别方法

Web Container Detection Method Based on Active Probing

  • 摘要: 随着工业互联网的迅速发展,企业使用的Web容器种类持续增多,这使得Web容器资产管理的复杂性问题更加突出,同时带来了诸多网络安全风险和隐患。为了进一步提升网络安全防御水平,本文提出了一种基于主动探测的Web容器探测识别方法。在探测阶段,我们采用Web容器探针构建方法,以此方法构建了Web容器探针。在识别过程中,采用了一种基于负载内容的Web容器识别方法,通过协议解码实现了对Web容器的准确识别。结合两种方法共识别了4种不同的Web容器,而且可以精确地区分版本,总共实现了10种不同的版本的识别。

     

    Abstract: With the development of industrial Internet, the types of Web containers used by enterprises continue to increase, which makes Web container asset management more complicated and increases many network security risks and hidden dangers. In order to further improve network security defense capabilities, this article proposes a method of Web container detection and identification based on active detection. In the detection part, the Web container probe construction method is used to construct the Web container probe; in the identification part, a Web container identification method based on payload content is used to achieve Web container identification based on protocol decoding. By combining these two methods, four types of Web containers were identified, and a total of ten versions could be recognized.

     

/

返回文章
返回