In recent years, under the influence of information technology, people’s lifestyles and quality of life have undergone earth shaking changes, all thanks to the application and use of network technology. Of course, in the continuous application of network technology, network security issues have gradually become a problem that people must pay attention to. Website vulnerabilities are a significant cause of network security issues. According to data, the number of network security issues caused by network vulnerabilities has been increasing rapidly in recent years. Network vulnerabilities can bring certain conveniences for attackers to implant viruses and trojans, which can threaten the property, data, and privacy security of network users. Therefore, research on network vulnerabilities should start with prevention, control the probability of being attacked, and develop scientific risk control methods.
1、 Common vulnerabilities
The most common targets of network attacks at present are operating systems, servers, and web pages. (1) Operating system vulnerabilities. The vulnerability actually refers to the technical defects and problems of the computer system itself. According to statistics, the most commonly used system among the general public is Windows, followed by Unix, MacOS, and other types of systems. The open-source nature of Windows often leads to vulnerabilities in the system. These vulnerabilities are mostly caused by inadequate consideration and design errors at the beginning of software design. For example, the system patches we often see are actually mostly fixing vulnerabilities from the last century. Of course, some users may also encounter system failures and vulnerabilities due to improper use of the system. (2) Server vulnerability. During the operation of the server, it is actually threatened by many factors, including denial of service, SQL injection, IIS attacks, etc. There are several specific forms of server vulnerabilities: the first type is that the server cannot respond to user access. The second type of gateway interface has security vulnerabilities. The third type of user, when sending information to the server, has their account and password information stolen by attackers, which is an important reason for the problem of account theft. (3) Web vulnerabilities. Web pages are actually vulnerable to attacks. The two common vulnerabilities currently include injection, authentication, and session management failures. Firstly, injection. From the literal meaning, data from anywhere can actually become a carrier. Including external web services, internal web services, parameters, and users. In the process of hacking these data, it is very likely that hackers will choose to use the method of sending malicious data to change the original program, which will result in injection vulnerabilities. This vulnerability is likely to cause data instability imbalance, leading to data destruction and loss issues. In addition, denial of service and lack of auditability are also phenomena caused by this issue. The second issue is the failure of access management and authentication systems. Attackers use special hacking techniques to hack the system, resulting in authentication failure. The common method is to trigger identity authentication failure through phishing attacks.
2、 Vulnerability protection methods
(1) Operating system protection. Based on the analysis of common vulnerability forms in Windows systems, the following two solutions are proposed. The first type of design error problem, for which only the corresponding patch needs to be installed in a timely manner according to Microsoft’s prompts. Of course, due to some users not using genuine devices and not receiving genuine patch update prompts, it is necessary to install software programs to prompt users to install computer patches, such as 360. The second type of setting error problem, for which users only need to modify the computer system configuration themselves. (2) Server protection. Common solutions to problems encountered during server operation include improving client management, adding IP access restriction requirements, honeypot technology, reverse proxy, password security, and anti webpage tampering technology. (3) Web page protection. For injection type vulnerabilities, it is necessary to use a method of separating query statements, command statements, and data to reduce the probability of vulnerability occurrence. The currently commonly used method is to apply secure APIs instead of using interpreters. Of course, parameterized interfaces or direct migration of information to entity frameworks or ORMs can also be used. Using whitelist to complete account login is also an effective method to reject injection attacks. Dynamic queries can use interpreters to perform special character escaping. To prevent authentication and session management failures, the common method is to use non outdated hash technology to store passwords. The second method is to do a good job of weak password checking. The third method is to verify identity through various means. The fourth method is to inform the administrator in a timely manner through system logs when the server and account password are forcibly attacked.
3、 Vulnerability mining
（1） Data Mining
This technology identifies vulnerability factors by mining a large amount of information data. This technology can find a large amount of information and use crawler technology to complete data processing, data information, data integration, data monitoring, etc. Finally, useful information is extracted using special algorithms and statistical methods. This technology combines network feature mining data and uses statistical and data analysis techniques to analyze online abnormal situations, identifying website, server, and system vulnerability factors, and effectively identifying vulnerability issues between the system and the website itself.
（2） Binary comparison
This technology is also known as patch comparison technology. Binary comparison fully utilizes known vulnerabilities, so from some perspectives, binary comparison is a highly effective analytical technique. When the cause and specific location of the vulnerability are unknown, binary files before and after patching can be used to determine the cause and location. Of course, this technology is actually a general term, and common techniques include file disassembly comparison and byte comparison.
（3） Web crawler scanning
Before exploiting vulnerabilities, it is usually necessary to scan for them first. Scanning includes fingerprint recognition scanning, host scanning, port scanning, etc. It can be said that scanning technology is a very effective defense technology. During the process of scanning the operating system, host, and ports, the program can obtain a large amount of useful information. Subsequently, the software can learn about the hidden problems and risks of the computer itself based on this information. The web crawler is a program that can automatically grab Internet information. Web crawlers can backup and perform deep processing on downloaded web page images. Both scanning and web crawling are just steps in vulnerability mining, which can yield a lot of useful information. The two cannot directly obtain vulnerabilities, and often require cooperation with other plugins and technologies to exploit vulnerabilities.
English 
简体中文 
Website Builder Online
