WO2018086293A1

WO2018086293A1 - Method and apparatus for detecting data leakage interface, device, and storage medium

Info

Publication number: WO2018086293A1
Application number: PCT/CN2017/077985
Authority: WO
Inventors: 王金锭
Original assignee: 平安科技（深圳）有限公司
Priority date: 2016-11-14
Filing date: 2017-03-24
Publication date: 2018-05-17
Also published as: CN107038372A

Abstract

A method for detecting a data leakage interface, comprising: acquiring, when application software runs, data which is output to the outside of a terminal and/or is stored in the terminal locally by an application software interface (S10); detecting whether the acquired data comprise privacy data according to a preconfigured privacy database (S20); and if it is detected that the acquired data comprise privacy data, determining the interface as an interface for leakage of the privacy data (S30). Also disclosed are an apparatus for detecting a data leakage interface, a device, and a computer-readable storage medium. In combination with dynamic data acquisition and automatic static data analysis, the present invention ensures the integrity of data for detection and analysis, avoids false reporting and missing reporting of a privacy data leakage interface, and greatly improves the detection efficiency of the privacy leakage interface of application software and reduces labor costs.

Description

Data leakage interface detection method, device, device and storage medium

Technical field

The present invention relates to the field of information security technologies, and in particular, to a data leakage interface detection method, apparatus, device, and computer readable storage medium.

Background technique

A variety of application software involves people's social, property, office, life and other aspects, bringing convenience to people's work and life, and become an indispensable part of intelligent terminals. In the application process, the application software can contact and collect a large amount of user data, including account passwords, chat information and other private information.

In order to protect the user's information security, the current method of checking the application software privacy leakage is generally manual analysis. With the experience of the tester, it is defined whether the data of the local storage, network transmission and log output of each interface in the application software running process involves privacy. Leak the problem. On the one hand, the inspection method of manual analysis takes a long time, there is repetitive work, and human resources are wasted; on the other hand, depending on the experience of testers, there may be omissions or misjudgments.

It can be seen that the current manual analysis method leads to inefficient detection of the application software privacy leak interface.

Summary of the invention

The main purpose of the present invention is to provide a data leakage interface detection method, device, device and computer readable storage medium, which are intended to solve the technical problem of low detection efficiency of the application software privacy leakage interface.

To achieve the above objective, the present invention provides a data leakage interface detection method, and the data leakage interface detection method includes the following steps:

Collecting, by the application software interface, data outputted to the outside of the terminal and/or stored locally to the terminal when the application software is running;

Detecting whether the collected data includes private data according to a pre-configured privacy database;

If it is detected that the collected data includes private data, it is determined that the interface is an interface that leaks private data.

Preferably, the collected data includes a plurality of data items, and the step of detecting whether the collected data includes private data according to the pre-configured privacy database comprises:

Determining, according to the privacy database, whether each data item includes private data;

If it is detected that at least one data item contains private data, it is determined that the collected data includes private data.

Preferably, after the step of determining that the interface is an interface for leaking private data, the method further includes:

According to the security level of the privacy data included in the collected data, the hazard level of the interface is correspondingly configured.

Preferably, before the step of collecting the output of the application software interface to the outside of the terminal and/or storing the data locally to the terminal, the method further includes:

And configuring, according to the preset privacy data, a privacy data entry that includes multiple data forms to obtain the privacy database;

The private data is input to the application software while the application software is running.

Preferably, the step of collecting the output of the application software interface to the outside of the terminal and/or storing the data locally to the terminal comprises:

Grab the network information packet output by the interface, and obtain the data output by the interface to the outside of the terminal;

Based on the pre-configured instrumentation, the local broadcast and the log output by the interface are collected, and the data stored by the interface to the terminal is obtained.

In addition, in order to achieve the above object, the present invention further provides a data leakage interface detecting apparatus, where the data leakage interface detecting apparatus includes:

An acquisition module, configured to collect data output by the application software interface to the outside of the terminal and/or stored locally to the terminal when the application software is running;

a detecting module, configured to detect, according to the pre-configured privacy database, whether the collected data includes private data;

And a determining module, configured to determine that the interface is an interface that leaks private data if the collected data is detected to include private data.

Preferably, the collected data includes a plurality of data items, and the detecting module is further configured to:

And determining, according to the privacy database, whether each data item includes private data; if it is detected that at least one data item includes private data, determining that the collected data includes private data.

Preferably, the data leakage interface detecting device further includes:

The level module is configured to correspondingly configure a hazard level of the interface according to a security level of the privacy data included in the collected data.

Preferably, the data leakage interface detecting device further includes:

a configuration module, configured to: configure, according to preset privacy data, a privacy data entry that includes multiple data forms to obtain the privacy database;

And an input module, configured to input the private data to the application software when the application software is running.

Preferably, the acquisition module is further configured to:

The network information packet outputted by the interface is captured, and the data outputted by the interface to the outside of the terminal is obtained. The local broadcast and the log output by the interface are collected based on the pre-configured instrumentation, and the data stored by the interface to the terminal is obtained. .

In addition, in order to achieve the above object, the present invention further provides a data leakage interface detecting device, where the data leakage interface detecting device includes a processor and a memory, wherein the memory stores a data leakage interface detecting program;

The processor is configured to execute the data leakage interface detection program to implement the following steps:

Collecting, when the application software is running, outputting the application software interface to the outside of the device and/or storing the data locally to the device;

If it is detected that the collected data includes private data, the application software interface is determined to be an interface for leaking private data.

Preferably, the collected data includes a plurality of data items, and the processor is further configured to execute the data leakage interface detection program to implement the following steps:

Preferably, the processor is further configured to execute the data leakage interface detection program to implement the following steps:

And determining a hazard level of the application software interface according to a security level of the privacy data included in the collected data.

Grab the network information packet output by the application software interface, and obtain data output by the application software interface to the outside of the device;

The local broadcast and the log output by the application software interface are collected based on the pre-configured instrumentation, and the data stored by the application software interface to the device is obtained.

Moreover, in order to achieve the above object, the present invention also provides a computer readable storage medium storing one or more programs, the one or more programs being executable by one or more processors To achieve the following steps:

Preferably, the collected data includes a plurality of data items, and the one or more programs may be executed by the one or more processors, and further implement the following steps:

Preferably, the one or more programs are executable by the one or more processors, and the following steps are also implemented:

A data leakage interface detecting method, device, device and computer readable storage medium are provided. When the application software is running, the application software interface is collected and outputted to the external terminal and/or stored locally to the terminal. The data collected during the dynamic running of the application software, so that the information data outputted during the actual running process of the application software can be obtained, so that the collected data has a wider coverage, authenticity, reliability and integrity; and then, according to the pre-configuration The privacy database detects whether the collected data contains private data, thereby realizing automatic detection of whether the collected data contains private data, and is based on a privacy database that records various private data. Therefore, when detecting the collected data, manual analysis avoids false negatives and false positives caused by experience. If it is detected that the collected data includes private data, it is determined that the interface is an interface for leaking private data, thereby obtaining interfaces for leaking private data in the application software, and completing detection of leaking private data of the application software interface. Through the invention, combined with dynamic data acquisition and automatic analysis of static data, it does not miss any data output by the application software interface, guarantees the integrity of the data used for detection and analysis, and avoids false positives and false negatives of the privacy data leakage interface. It greatly improves the efficiency of application software privacy leak detection and reduces labor costs.

DRAWINGS

1 is a schematic flowchart of a first embodiment of a data leakage interface detecting method according to the present invention;

2 is a schematic diagram of a refinement process of step S20 in FIG. 1;

3 is a schematic flowchart of a second embodiment of a data leakage interface detecting method according to the present invention;

4 is a schematic flowchart of a third embodiment of a data leakage interface detecting method according to the present invention;

FIG. 5 is a schematic flowchart of a step of collecting data outputted by the application software interface to the outside of the terminal and/or stored locally to the terminal according to an embodiment of the data leakage interface detecting method of the present invention;

6 is a schematic diagram of functional modules of a first embodiment of a data leakage interface detecting apparatus according to the present invention;

7 is a schematic diagram of functional modules of a second embodiment of a data leakage interface detecting apparatus according to the present invention;

8 is a schematic diagram of functional modules of a third embodiment of a data leakage interface detecting apparatus according to the present invention;

FIG. 9 is a schematic structural diagram of a device in a hardware operating environment according to an embodiment of the present invention.

The implementation, functional features, and advantages of the present invention will be further described in conjunction with the embodiments.

detailed description

It is understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

Referring to FIG. 1 , a first embodiment of the data leakage interface detection method of the present invention provides a data leakage interface detection method, where the data leakage interface detection method includes:

Step S10: When the application software is running, collect the data output by the application software interface to the outside of the terminal and/or stored to the terminal.

The invention collects the externally outputted data during the running process of the application software, and automatically detects whether the externally outputted data contains private data offline, does not require manual manual detection, and does not rely on manual experience, and can automatically check the privacy of the application software in all aspects. Leak problems, avoid false negatives, and improve the efficiency of application privacy leak detection.

Specifically, as an implementation manner, the application software is started, and in the process of running the application software, all the data outputted by each interface in the running process of the application software are separately collected through various forms such as instrumentation and packet capture.

It should be noted that all the data outputted by the interface during the running of the application software includes the data outputted by the interface to the outside of the terminal in the form of a network, and the data stored locally to the terminal, for example, a written log, a printed file, and sent to the terminal for deployment. Other application software data, etc.

After collecting all the data outputted by each interface, the data output by each interface is separately recorded to detect whether the data output by each interface involves leakage of private data.

Step S20: Detect whether the collected data includes private data according to a pre-configured privacy database.

After collecting all the data output by the application software interface, according to the pre-configured privacy database, it is detected whether the collected data contains sensitive private data.

The privacy database includes various privacy data input to the application software and data related to user privacy generated by the application software, such as an account password, a chat record, a transaction record, and the like.

Moreover, the data related to user privacy recorded in the privacy database corresponds to a private data entry including multiple data forms, such as a privacy data entry corresponding to the account password, including plaintext, a hash value, a character string, and the like. Account password. The private data of different data forms in the same private data entry can be stored in sections, thereby improving the flexibility of private data monitoring, so as to prevent the application software from converting the private data after the output data is converted.

Therefore, after collecting all the data output by the application software interface, it is found in the privacy database whether there is a private data entry that matches the collected data. If a private data entry matching the collected data is found in the privacy database, it is determined that the data output by the application software interface contains private data.

Further, as an implementation manner, the collected data includes a plurality of data items. Referring to FIG. 2, the step S20 includes:

Step S21: detecting, according to the privacy database, whether each data item includes private data;

Step S22: If it is detected that at least one data item includes private data, it is determined that the collected data includes private data.

It should be noted that the data output by the collected application software interface includes multiple data items. For example, each message sent by the interface to the server through the network is a data item, and one log written by the interface is one data item.

After collecting the data items, the private data items matching the data items are respectively searched in the privacy database. If a data item is the same as a piece of data in a private data entry, it is determined that the data item matches the private data item, and the data item contains private data. By analogy, each data item is detected separately, and the detection result of each data item is obtained.

After obtaining the detection result of each data item, if at least one data item contains private data, that is, the privacy database contains at least one private data item matching the collected data item, it may be determined that the currently collected data contains privacy data. Data, thereby determining that the data output by the current interface carries private data, which may involve leakage of private data.

Since the interface may output multiple data items during the running of the application software, after collecting all the data items output by the interface during the running process of the application software, respectively searching for corresponding matching private data items according to the privacy database to implement the data. Automated individual verification of items. Moreover, if there is a private data entry matching the data item in the privacy database, it may be determined that the data output by the current interface relates to the private information, thereby avoiding false positives and false negatives of the privacy leakage.

Same as above, the data outputted by each interface of the collected application software is detected, and it is determined whether the data output by each interface of each application software contains private data.

Step S30: If it is detected that the collected data includes private data, determine that the interface is an interface that leaks private data.

If the data outputted by an interface of the application software is detected to contain private data, the interface may be determined as an interface for leaking private data. Further, the interface may be identified, and the data type leaked by the interface may be recorded, so as to The application software is further optimized.

In this embodiment, when the application software is running, the data collected by the application software interface to the outside of the terminal and/or stored to the terminal is collected, and since the data is collected during the dynamic operation of the application software, the actual operation of the application software can be obtained. The information data output in the process enables the collected data to have a wider coverage, authenticity, reliability and integrity. Then, according to the pre-configured privacy database, it is detected whether the collected data contains private data, thereby It realizes the automatic detection of whether the collected data contains private data. Because it is based on the privacy database that records various private data, it avoids manual analysis to experience when collecting the collected data. Misreports and false positives caused by the basis. If it is detected that the collected data includes private data, it is determined that the interface is an interface for leaking private data, thereby obtaining interfaces for leaking private data in the application software, and completing detection of leaking private data of the application software interface. Through the embodiment, combined with dynamic data acquisition and automatic analysis of static data, any data output by the application software interface is not missed, the integrity of the data used for detection and analysis is ensured, and false alarms and leaks of the privacy data leakage interface are avoided. Reporting greatly improves the efficiency of application software privacy leak detection and reduces labor costs.

Further, referring to FIG. 3, the second embodiment of the data leakage interface detecting method of the present invention provides a data leakage interface detecting method, which is based on the first embodiment of the data leakage interface detecting method of the present invention.

Step S40: Corresponding to configuring a security level of the interface according to the privacy data security level included in the collected data.

After detecting whether each data item contains private data, if only one data item is detected to contain private data, the private data item matching the data item in the privacy database is obtained, and the security level preset according to the matched private data item is obtained. Corresponds to the hazard level of the current interface.

For example, if the privacy data entry is an account password and the corresponding security level is higher, it is a level, and the corresponding interface has a hazard level of one level, and the account leakage problem is not needed; if the privacy data item is a chat content The corresponding security level is medium, and the second level is corresponding to the current interface. The hazard level of the current interface is level 2, so that the technician can know the danger of each interface that leaks privacy.

Further, after detecting whether each data item includes private data, if it is detected that the plurality of data items include the private data, respectively acquiring the private data items in the privacy database that match the plurality of data items, and acquiring the matched private data. The default security level of the entry.

Then, according to the security level with the highest security level in each matching private data entry, the hazard level of the current interface is correspondingly configured. For example, in the currently acquired data for detecting two data items containing private data: a data item containing an account password and a data item containing the chat content. The security level corresponding to the account password is higher, which is one level, and the security level corresponding to the chat content is medium level, and the security level is the first level, and the security level corresponding to the current interface is one level.

Thereby, the hazard level configuration of the interface for the application software to leak private data is realized.

In this embodiment, if it is determined that the interface of the application software is an interface for leaking private data, the security level of the privacy data included in the data output by the interface is obtained according to the collection, and the dangerous level of the interface is configured correspondingly, and the This application's privacy data disclosure assessment report enables technicians to keep abreast of the application's privacy data disclosure and the dangers of leaking private data interfaces.

Further, referring to FIG. 4, the third embodiment of the data leakage interface detecting method of the present invention provides a data leakage interface detecting method, which is based on the first embodiment or the second embodiment of the data leakage interface detecting method of the present invention. The first embodiment of the data leakage interface detecting method of the present invention is an example. Before the step S10, the method further includes:

Step S50: Configure, according to the preset privacy data, a privacy data entry that includes multiple data forms to obtain the privacy database.

Step S60: When the application software is running, input the private data to the application software.

When performing the privacy data leakage detection of the application software, it is first necessary to configure a privacy database for determining whether the application software interface leaks private data.

Specifically, as an implementation manner, corresponding privacy data items are configured according to preset privacy data for testing.

When configuring a private data entry corresponding to the private data, the private data needs to be converted into multiple data forms, and the private data of different data forms can be stored in the private data item in a section, so as to facilitate matching of subsequent data items.

It should be noted that when converting the data format of the private data, it can be converted into plain text, a string, a hash value, and the like, and can be flexibly configured according to actual needs. The more data forms that are converted, the more likely it is to reduce the false negatives of private data breaches.

After obtaining the privacy data items corresponding to the various privacy data, the private data and the corresponding private data items are configured into the privacy database.

When the application is running, input pre-configured private data to the application, such as entering an account password, simulating a chat session to input chat content, simulating a transaction input transaction amount, and the like.

Therefore, after collecting all the interfaces of the application software to the outside of the terminal and/or all the data stored in the terminal, the private data can be verified to be leaked in various forms according to the privacy database.

In this embodiment, the privacy data is stored in a plurality of data forms according to the preset privacy data, and the privacy database is obtained. When the application software is running, the preset privacy data is input to the application software, so that the collected data is detected. At the same time, the privacy data converted by the data form can be accurately identified, and whether the application software converts the private data into the data form and output, thereby avoiding the false negative of the privacy leakage interface.

Further, referring to FIG. 5, a fourth embodiment of the data leakage interface detecting method of the present invention provides a data leakage interface detecting method, which is based on the first embodiment, the second embodiment, or the third embodiment of the data leakage interface detecting method of the present invention. The step S10 includes:

Step S11: Grab the network information packet output by the interface, and obtain data output by the interface to the outside of the terminal;

In step S12, the local broadcast and the log output by the interface are collected based on the pre-configured instrumentation, and the data stored by the interface to the terminal is obtained.

When the application software runs, all the data output by the application software interface needs to be collected, including data outputted to the outside of the terminal and stored locally to the terminal.

Specifically, as an implementation manner, if data that is output to the outside of the terminal needs to be collected, the packet sent by the interface through the network may be captured by the packet capture method, and the data in the network information packet is extracted, and the interface is obtained. Output data to the outside of the terminal.

Of course, it is also possible to collect packets sent by the interface through the network by instrumentation.

As another implementation manner, if it is required to collect data stored locally in the terminal, the instrumentation may be pre-configured on the interface to capture the local broadcast and the written log output by the interface.

Wherein, since the local broadcast can be listened to by the terminal system or other application software installed in the terminal, there is a risk of leakage of the privacy data, and the data content of the broadcast needs to be collected for detection; the log file may be other application software installed in the terminal system or the terminal. Grab and read, therefore, there is a risk of privacy data leakage, and it is necessary to collect broadcast data content for detection.

Then, the data content of the local broadcast and the log is extracted, and the data stored by the interface to the terminal is obtained.

Of course, it is also possible to collect other data stored locally to the terminal by means of instrumentation.

In this embodiment, by extracting the network information packet outputted by the interface, the data outputted by the interface to the outside of the terminal can be obtained; based on the pre-configured instrumentation, the local broadcast and the log output by the interface can be collected, and the interface is stored locally to the terminal. The data, thus, enables the collection of all data output by the interface.

It should be noted that those skilled in the art can understand that all or part of the steps of implementing the above embodiments may be completed by hardware, or may be instructed by a program to execute related hardware, and the program may be stored in a computer readable state. In the storage medium, the above-mentioned storage medium may be a read only memory, a magnetic disk or an optical disk or the like.

Further, referring to FIG. 6, the first embodiment of the data leakage interface detecting device of the present invention provides a data leakage interface detecting device, where the data leakage interface detecting device includes:

The collecting module 10 is configured to collect data output by the application software interface to the outside of the terminal and/or stored locally to the terminal when the application software is running.

Specifically, as an implementation manner, the application software is started. During the running of the application software, the collection module 10 collects all the data externally output by each interface in the running process of the application software by using various forms such as instrumentation and packet capture.

It should be noted that all data outputted by the interface during the running of the application software includes data stored in the terminal to the terminal and data outputted to the outside of the terminal in the form of a network, for example, a written log, a printed file, and sent to the terminal for deployment. Other application software data, etc.

After collecting all the data output by each interface, the collection module 10 separately records the data output by each interface to detect whether the data output by each interface involves leakage of private data.

The detecting module 20 is configured to detect, according to the pre-configured privacy database, whether the collected data includes private data.

After collecting all the data output by the application software interface, the detecting module 20 detects, according to the pre-configured privacy database, whether the collected data contains sensitive private data.

Therefore, after collecting all the data output by the application software interface, the detecting module 20 searches the privacy database for whether there is a private data entry that matches the collected data. If a private data entry matching the collected data is found in the privacy database, it is determined that the data output by the application software interface contains private data.

Further, as an implementation manner, the collected data includes a plurality of data items, and the detecting module 20 is further configured to:

Then, after collecting each data item, the detecting module 20 searches for a private data item matching each data item in the privacy database. If a data item is the same as a piece of data in a private data entry, it is determined that the data item matches the private data item, and the data item contains private data. By analogy, the detecting module 20 detects each data item separately, and obtains the detection result of each data item.

After obtaining the detection result of each data item, if at least one data item includes private data, that is, the privacy database includes at least one private data item matching the collected data item, the detecting module 20 may determine the currently collected data. The privacy data is included, thereby determining that the data output by the current interface carries private data, which may involve leakage of private data.

Since the interface may output multiple data items during the running of the application software, after collecting all the data items output by the interface during the running of the application software, the detecting module 20 searches for the corresponding matching private data items according to the privacy database, respectively, to implement Automated individual verification of each data item. Moreover, if there is a private data entry matching the data item in the privacy database, it may be determined that the data output by the current interface relates to the private information, thereby avoiding false positives and false negatives of the privacy leakage.

In the same manner, the detecting module 20 detects the data outputted by each interface of the collected application software, and determines whether the data output by each interface of each application software contains private data.

The determining module 30 is configured to determine that the interface is an interface that leaks private data if the collected data is detected to include private data.

If the data outputted by an interface of the application software is detected to contain the private data, the determining module 30 may determine that the interface is an interface for leaking the private data. Further, the determining module 30 may identify the interface and record the interface leakage. The data type is further optimized for the application software.

In this embodiment, when the application software is running, the collection module 10 collects the data output by the application software interface to the outside of the terminal and/or stored locally to the terminal, and is capable of acquiring the application because the data is collected during the dynamic operation of the application software. The information data output during the actual operation of the software makes the collected data cover a wider range, with authenticity, reliability and integrity. Then, the detecting module 20 detects the collected data according to the pre-configured privacy database. Whether or not the private data is included, thereby realizing the automatic detection of whether the collected data contains private data, and is based on the privacy database in which the private data is recorded, therefore, when detecting the collected data, Avoid manual reporting of false negatives and false positives based on experience. If it is detected that the collected data includes the private data, the determining module 30 determines that the interface is an interface for leaking the private data, thereby obtaining each interface of the application software that leaks the private data, and completing the disclosure of the private data to the application software interface. Detection. Through the embodiment, combined with dynamic data acquisition and automatic analysis of static data, any data output by the application software interface is not missed, the integrity of the data used for detection and analysis is ensured, and false alarms and leaks of the privacy data leakage interface are avoided. Reporting greatly improves the efficiency of application software privacy leak detection and reduces labor costs.

Further, referring to FIG. 7, the second embodiment of the data leakage interface detecting apparatus of the present invention provides a data leakage interface detecting apparatus. The data leakage interface detecting apparatus further includes the data leakage interface detecting apparatus according to the first embodiment of the present invention. :

The level module 40 is configured to correspondingly configure a hazard level of the interface according to a security level of the privacy data included in the collected data.

After detecting whether each data item contains private data, if only one data item is detected to contain private data, the level module 40 obtains a private data item in the privacy database that matches the data item, and presets according to the matched private data item. The security level corresponds to the hazard level of the current interface.

For example, if the privacy data entry is an account password and the corresponding security level is higher, it is a level, and the level module 40 is configured to set the risk level of the current interface to one level, and the account leakage problem is not needed; if the privacy data entry is For the content of the chat, the corresponding security level is medium, and the level of the corresponding interface is two levels, so that the technician can know the danger of each interface that leaks privacy.

Further, after detecting whether each data item includes private data, if it is detected that the plurality of data items include the private data, the level module 40 respectively obtains the private data items in the privacy database that match the plurality of data items, and obtains each matching. The privacy level of the privacy data entry is preset.

Then, the level module 40 correspondingly configures the hazard level of the current interface according to the security level with the highest security level among the matched private data items. For example, in the currently acquired data for detecting two data items containing private data: a data item containing an account password and a data item containing the chat content. The security level corresponding to the account password is higher, which is one level, and the security level corresponding to the chat content is medium level, and the security level is the first level, and the security level corresponding to the current interface is one level.

In this embodiment, if it is determined that the interface of the application software is an interface for leaking private data, the level module 40 correspondingly sets the security level of the privacy data included in the data output by the interface, and correspondingly configures the danger level of the interface, further A privacy data disclosure assessment report for this application can be formed, so that technicians can keep abreast of the privacy data leakage of the application and the danger of leaking the interface of the private data.

Further, referring to FIG. 8 , a third embodiment of the data leakage interface detecting apparatus of the present invention provides a data leakage interface detecting apparatus. The data leakage is based on the first embodiment or the second embodiment of the data leakage interface detecting apparatus of the present invention. The interface detecting device further includes:

The configuration module 50 is configured to: configure, according to the preset privacy data, a privacy data entry that includes multiple data forms to obtain the privacy database;

The input module 60 is configured to input the private data to the application software when the application software is running.

When performing privacy data leakage detection of the application software, the configuration module 50 first needs to configure a privacy database for determining whether the application software interface leaks private data.

Specifically, as an implementation manner, the configuration module 50 configures corresponding privacy data entries according to preset privacy data for testing.

When configuring a private data entry corresponding to the privacy data, the configuration module 50 needs to convert the private data into multiple data forms, and the private data of different data forms may be stored in the private data item in a section, so as to facilitate subsequent data items. match.

After obtaining the privacy data items corresponding to the privacy data, the configuration module 50 configures the private data and the corresponding private data items into the privacy database.

When the application software is running, the input module 60 inputs pre-configured private data to the application software, such as entering an account password, simulating a chat session to input chat content, simulating a transaction input transaction amount, and the like.

Thus, after the collection interface of the application software outputs all data external to the terminal and/or stored locally to the terminal, the detection module 20 can verify whether the input privacy data is leaked in various forms according to the privacy database.

In this embodiment, the configuration module 50 configures a privacy data entry that includes multiple data forms based on the preset privacy data corresponding configuration to obtain a privacy database. When the application software is running, the input module 60 inputs preset privacy data to the application software. Therefore, when detecting the collected data, the privacy data converted by the data form can be accurately identified, and whether the application software converts the private data into the data form and output, thereby avoiding the false negative of the privacy leakage interface.

Further, the fourth embodiment of the data leakage interface detecting apparatus of the present invention provides a data leakage interface detecting apparatus, which is based on the first embodiment, the second embodiment or the third embodiment of the data leakage interface detecting apparatus of the present invention. Module 10 is also used,

When the application software is running, the collection module 10 needs to collect all the data output by the application software interface, including data outputted to the outside of the terminal and stored locally to the terminal.

Specifically, as an implementation manner, if it is required to collect data outputted to the outside of the terminal, the collection module 10 may capture the information packet sent by the interface through the network by capturing the packet, and extract the data in the network information packet. Get the data that this interface outputs to the outside of the terminal.

Of course, the collection module 10 can also collect the information packets sent by the interface through the network through the instrumentation.

As another implementation manner, if it is required to collect data stored locally in the terminal, the collection module 10 may pre-configure the instrumentation on the interface, and capture the local broadcast and the written log output by the interface.

Then, the collection module 10 extracts the data content of the local broadcast and the log, and obtains the data stored by the interface to the terminal.

Of course, the collection module 10 can also collect other data stored locally to the terminal by means of instrumentation.

In this embodiment, the collection module 10 can obtain the data outputted by the interface to the outside of the terminal by capturing the network information packet output by the interface; based on the pre-configured instrumentation, the local broadcast and the log output by the interface can be collected, and the interface is stored to the interface. The data local to the terminal, thereby realizing the collection of all data outputted by the interface.

It should be noted that, in hardware implementation, the foregoing collection module 10, the detection module 20, the determination module 30, the level module 40, the configuration module 50, and the input module 60 may be embedded in hardware or independent of the data leakage interface detecting device. The software may also be stored in the memory of the data leakage interface detecting device in a software form, so that the processor calls to perform the operations corresponding to the above modules. The processor can be a central processing unit (CPU), a microprocessor, a microcontroller, or the like.

As shown in FIG. 9, FIG. 9 is a schematic structural diagram of a device in a hardware operating environment according to an embodiment of the present invention.

The data leakage interface detecting device in the embodiment of the present invention may be a PC, or may be a terminal device such as a smart phone, a tablet computer, an e-book reader, or a portable computer.

As shown in FIG. 9, the data leakage interface detecting device may include a processor 1001 such as a CPU, and a memory 1002. Connection communication between these components can be achieved via a communication bus. The memory 1002 may be a high speed RAM memory or a stable memory (non-volatile) Memory), such as disk storage. The memory 1002 can also optionally be a storage device independent of the aforementioned processor 1001.

Optionally, the data leakage interface detecting device may further include a user interface, a network interface, a camera, and an RF (Radio) Frequency, RF) circuits, sensors, audio circuits, WiFi modules, and more. The user interface may include a display, an input unit such as a keyboard, and the optional user interface may also include a standard wired interface, a wireless interface. The network interface can optionally include a standard wired interface or a wireless interface (such as a WI-FI interface).

It will be understood by those skilled in the art that the data leakage interface detecting device structure shown in FIG. 9 does not constitute a limitation of the data leakage interface detecting device, and may include more or less components than those illustrated, or combine some components. Or different parts arrangement.

As shown in FIG. 9, an operating system and a data leak interface detection program may be included in the memory 1002 as a computer storage medium. Among them, the operating system is a program that manages and controls the data leakage interface to detect the hardware and software resources of the device, and supports the operation of the data leakage interface detection program and other programs or software.

In the data leakage interface detecting device shown in FIG. 9, the processor 1001 can be configured to execute a data leakage interface detecting program stored in the memory 1002 to implement the following steps:

Further, the collected data includes a plurality of data items, and the processor 1001 may further execute a data leakage interface detection program stored in the memory 1002 to implement the following steps:

Further, the processor 1001 can also execute a data leakage interface detection program stored in the memory 1002 to implement the following steps:

The specific embodiment of the data leakage interface detecting device of the present invention is basically the same as the foregoing embodiment of the data leakage interface detecting method and device, and details are not described herein.

The present invention provides a computer readable storage medium storing one or more programs, the one or more programs being executable by one or more processors to implement the following steps:

Further, the collected data includes a plurality of data items, and the one or more programs may be executed by the one or more processors, and further implement the following steps:

Further, the one or more programs may be executed by the one or more processors, and the following steps are also implemented:

The specific embodiment of the computer readable storage medium of the present invention is substantially the same as the foregoing embodiment of the data leakage interface detecting method and apparatus, and is not described herein.

It is also to be understood that the term "comprises", "comprising", or any other variants thereof is intended to encompass a non-exclusive inclusion, such that a process, method, article, or device that comprises a And includes other elements not explicitly listed, or elements that are inherent to such a process, method, article, or device. An element that is defined by the phrase "comprising a ..." does not exclude the presence of additional equivalent elements in the process, method, item, or device that comprises the element.

The serial numbers of the embodiments of the present invention are merely for the description, and do not represent the advantages and disadvantages of the embodiments. Through the description of the above embodiments, those skilled in the art can clearly understand that the foregoing embodiment method can be implemented by means of software plus a necessary general hardware platform, and of course, can also be through hardware, but in many cases, the former is better. Implementation. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium (such as ROM/RAM, disk, The optical disc includes a number of instructions for causing a terminal device (which may be a cell phone, a computer, a server, or a network device, etc.) to perform the methods described in various embodiments of the present invention.

The above is only an alternative embodiment of the present invention, and thus does not limit the scope of the invention, and the equivalent structure or equivalent process transformation made by using the specification and the drawings of the present invention, or directly or indirectly applied to other related technologies. The fields are all included in the scope of patent protection of the present invention.

Claims

A data leakage interface detecting method, characterized in that the data leakage interface detecting method comprises the following steps:

Collecting, by the application software interface, data outputted to the outside of the terminal and/or stored locally to the terminal when the application software is running;

Detecting whether the collected data includes private data according to a pre-configured privacy database;

If it is detected that the collected data includes private data, it is determined that the interface is an interface that leaks private data.
The data leakage interface detecting method according to claim 1, wherein the collected data includes a plurality of data items, and the detecting the collected data includes privacy according to a pre-configured privacy database. The steps of the data include:

Determining, according to the privacy database, whether each data item includes private data;

If it is detected that at least one data item contains private data, it is determined that the collected data includes private data.
The method for detecting a data leakage interface according to claim 1, wherein after the step of determining that the interface is an interface for leaking private data, the method further includes:

According to the security level of the privacy data included in the collected data, the hazard level of the interface is correspondingly configured.
The data leakage interface detecting method according to claim 1, wherein the step of collecting the application software interface outputted to the external terminal and/or storing the data local to the terminal further comprises:

And configuring, according to the preset privacy data, a privacy data entry that includes multiple data forms to obtain the privacy database;

The private data is input to the application software while the application software is running.
The data leakage interface detecting method according to claim 1, wherein the step of collecting the data output by the application software interface to the outside of the terminal and/or stored locally to the terminal comprises:

Grab the network information packet output by the interface, and obtain the data output by the interface to the outside of the terminal;

Based on the pre-configured instrumentation, the local broadcast and the log output by the interface are collected, and the data stored by the interface to the terminal is obtained.
A data leakage interface detecting device, wherein the data leakage interface detecting device comprises:

An acquisition module, configured to collect data output by the application software interface to the outside of the terminal and/or stored locally to the terminal when the application software is running;

a detecting module, configured to detect, according to the pre-configured privacy database, whether the collected data includes private data;

And a determining module, configured to determine that the interface is an interface that leaks private data if the collected data is detected to include private data.
The data leakage interface detecting apparatus according to claim 6, wherein the collected data includes a plurality of data items, and the detecting module is further configured to:

And determining, according to the privacy database, whether each data item includes private data; if it is detected that at least one data item includes private data, determining that the collected data includes private data.
The data leakage interface detecting device according to claim 6, wherein the data leakage interface detecting device further comprises:

The level module is configured to correspondingly configure a hazard level of the interface according to a security level of the privacy data included in the collected data.
The data leakage interface detecting device according to claim 6, wherein the data leakage interface detecting device further comprises:

a configuration module, configured to: configure, according to preset privacy data, a privacy data entry that includes multiple data forms to obtain the privacy database;

And an input module, configured to input the private data to the application software when the application software is running.
The data leakage interface detecting device according to claim 6, wherein the collecting module is further configured to:

The network information packet outputted by the interface is captured, and the data outputted by the interface to the outside of the terminal is obtained. The local broadcast and the log output by the interface are collected based on the pre-configured instrumentation, and the data stored by the interface to the terminal is obtained. .
A data leakage interface detecting device, comprising: a processor and a memory, wherein the memory stores a data leakage interface detecting program;

The processor is configured to execute the data leakage interface detection program to implement the following steps:

Collecting, when the application software is running, outputting the application software interface to the outside of the device and/or storing the data locally to the device;

Detecting whether the collected data includes private data according to a pre-configured privacy database;

If it is detected that the collected data includes private data, the application software interface is determined to be an interface for leaking private data.
The data leakage interface detecting device according to claim 11, wherein the collected data includes a plurality of data items, and the processor is further configured to execute the data leakage interface detecting program to implement the following steps. :

Determining, according to the privacy database, whether each data item includes private data;

If it is detected that at least one data item contains private data, it is determined that the collected data includes private data.
The data leakage interface detecting device according to claim 11, wherein the processor is further configured to execute the data leakage interface detecting program to implement the following steps:

And determining a hazard level of the application software interface according to a security level of the privacy data included in the collected data.
The data leakage interface detecting device according to claim 11, wherein the processor is further configured to execute the data leakage interface detecting program to implement the following steps:

And configuring, according to the preset privacy data, a privacy data entry that includes multiple data forms to obtain the privacy database;

The private data is input to the application software while the application software is running.
The data leakage interface detecting device according to claim 11, wherein the processor is further configured to execute the data leakage interface detecting program to implement the following steps:

Grab the network information packet output by the application software interface, and obtain data output by the application software interface to the outside of the device;

The local broadcast and the log output by the application software interface are collected based on the pre-configured instrumentation, and the data stored by the application software interface to the device is obtained.
A computer readable storage medium, characterized in that the computer readable storage medium stores one or more programs, the one or more programs being executable by one or more processors to implement the following steps:

Collecting, by the application software interface, data outputted to the outside of the terminal and/or stored locally to the terminal when the application software is running;

Detecting whether the collected data includes private data according to a pre-configured privacy database;

If it is detected that the collected data includes private data, it is determined that the interface is an interface that leaks private data.
The computer readable storage medium of claim 16 wherein said collected data comprises a plurality of data items, said one or more programs being executable by said one or more processors, Implement the following steps:

Determining, according to the privacy database, whether each data item includes private data;

If it is detected that at least one data item contains private data, it is determined that the collected data includes private data.
The computer readable storage medium of claim 16 wherein said one or more programs are executable by said one or more processors, further implementing the steps of:

According to the security level of the privacy data included in the collected data, the hazard level of the interface is correspondingly configured.
The computer readable storage medium of claim 16 wherein said one or more programs are executable by said one or more processors, further implementing the steps of:

And configuring, according to the preset privacy data, a privacy data entry that includes multiple data forms to obtain the privacy database;

The private data is input to the application software while the application software is running.
The computer readable storage medium of claim 16 wherein said one or more programs are executable by said one or more processors, further implementing the steps of:

Grab the network information packet output by the interface, and obtain the data output by the interface to the outside of the terminal;

Based on the pre-configured instrumentation, the local broadcast and the log output by the interface are collected, and the data stored by the interface to the terminal is obtained.