SECURITY SCANNING METHOD AND APPARATUS FOR MINI PROGRAM, AND ELECTRONIC DEVICE

• US 20200143051A1
• Filed: 01/08/2020
• Published: 05/07/2020
• Est. Priority Date: 10/09/2017
• Status: Active Grant

• Current Assignee: Advanced New Technologies Company Limited (Ant Group Co., Ltd.)
• Original Assignee: Alibaba Group Holding Ltd.
• Inventors: ZHAO, Hao, CAO, Shijie, SHANG, Shanhu, LIU, Peng
• Granted Patent: US 10,846,402 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/54 by adding security routines or objects to programs
• CPC Class Codes: G06F 21/556 involving covert channels, i.e. data leakage between processes inhibiting the analysis of circuitry or operation with measures against power attack G06F21/755
• CPC Class Codes: G06F 21/562 Static detection
• CPC Class Codes: G06F 21/564 by virus signature recognition
• CPC Class Codes: G06F 21/566 Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities

Abstract

Methods, systems, and devices, including computer programs encoded on computer storage media, for processing an electronic coupon link are provided. One of the methods includes: obtaining a target mini program to be released, invoking a security scanning strategy combination to perform multi-dimensional security scanning on the target mini program; and when the target mini program passes the multi-dimensional security scanning, releasing the target mini program to a server. The multi-dimensional security scanning may include malicious code scanning on the target mini program, security loophole scanning on the target mini program, and security loophole scanning on a server interface of the target mini program.

Claims

1. A security scanning method for a mini program, comprising:

obtaining a target mini program to be released;

invoking a security scanning strategy combination to perform multi-dimensional security scanning on the target mini program, wherein the multi-dimensional security scanning comprises malicious code scanning on the target mini program, security loophole scanning on the target mini program, and security loophole scanning on a server interface of the target mini program;

when the target mini program passes the multi-dimensional security scanning, releasing the target mini program to a server.

2. The method according to claim 1, wherein the malicious code scanning on the target mini program comprises one or more of:

determining whether the target mini program includes a payload;

determining whether a malicious invoking function is present in functions invoked by the target mini program, wherein the malicious invoking function is an unauthorized invoking function for the target mini program; and

determining whether content invoked by the target mini program includes non-compliant content.

3. The method according to claim 2, wherein the determining whether the target mini program includes a payload comprising:

parsing codes and data in a load of the target mini program; and

comparing the parsed codes and data with samples of known payloads.

4. The method according to claim 2, wherein the determining whether content invoked by the target mini program includes non-compliant content comprising:

parsing media and text content invoked by the target mini program; and

comparing the parsed media and text content with non-compliant content samples.

5. The method according to claim 1, wherein the security loophole scanning on the target mini program comprises one or more of loophole scanning programs including:

determining whether the target mini program includes a sensitive information leaking loophole;

determining whether the target mini program includes an HTML code loophole;

determining whether the target mini program includes a JS code loophole; and

determining whether the target mini program includes an unauthorized external resource reference loophole.

6. The method according to claim 5, wherein the security loophole scanning on the target mini program comprises:

performing comparison with loophole database by one or more loophole scanners corresponding to the loophole scanning programs.

7. The method according to claim 1, wherein the security loophole scanning on a server interface of the target mini program comprises:

parsing the server interface of the target mini program; and

performing interface loophole scanning on the parsed server interface.

8. A security scanning device for a mini program, comprising one or more processors and a non-transitory computer-readable memory coupled to the one or more processors and configured with instructions executable by the one or more processors to perform operations comprising:

obtaining a target mini program to be released;

invoking a security scanning strategy combination to perform multi-dimensional security scanning on the target mini program, wherein the multi-dimensional security scanning comprises malicious code scanning on the target mini program, security loophole scanning on the target mini program, and security loophole scanning on a server interface of the target mini program; and

when the target mini program passes the multi-dimensional security scanning, releasing the target mini program to a server.

9. The device according to claim 8, wherein the malicious code scanning on the target mini program comprises one or more of:

determining whether the target mini program includes a payload;

determining whether a malicious invoking function is present in functions invoked by the target mini program, wherein the malicious invoking function is an unauthorized invoking function for the target mini program; and

determining whether content invoked by the target mini program includes non-compliant content.

10. The device according to claim 9, wherein the determining whether the target mini program includes a payload comprising:

parsing codes and data in a load of the target mini program; and

comparing the parsed codes and data with samples of known payloads.

11. The device according to claim 9, wherein the determining whether content invoked by the target mini program includes non-compliant content comprising:

parsing media and text content invoked by the target mini program; and

comparing the parsed media and text content with non-compliant content samples.

12. The device according to claim 8, wherein the security loophole scanning on the target mini program comprises one or more of loophole scanning programs including:

determining whether the target mini program includes a sensitive information leaking loophole;

determining whether the target mini program includes an HTML code loophole;

determining whether the target mini program includes a JS code loophole; and

determining whether the target mini program includes an unauthorized external resource reference loophole.

13. The device according to claim 12, wherein the security loophole scanning on the target mini program comprises:

performing comparison with loophole database by one or more loophole scanners corresponding to the loophole scanning programs.

14. The device according to claim 8, wherein the security loophole scanning on a server interface of the target mini program comprises:

parsing the server interface of the target mini program; and

performing interface loophole scanning on the parsed server interface.

15. A non-transitory computer-readable storage medium for security scanning for a mini program, storing instructions executable by one or more processors to cause the one or more processors to perform operations comprising:

obtaining a target mini program to be released;

invoking a security scanning strategy combination to perform multi-dimensional security scanning on the target mini program, wherein the multi-dimensional security scanning comprises malicious code scanning on the target mini program, security loophole scanning on the target mini program, and security loophole scanning on a server interface of the target mini program; and

when the target mini program passes the multi-dimensional security scanning, releasing the target mini program to a server.

16. The non-transitory computer-readable storage medium according to claim 15, wherein the malicious code scanning on the target mini program comprises one or more of:

determining whether the target mini program includes a payload;

determining whether a malicious invoking function is present in functions invoked by the target mini program, wherein the malicious invoking function is an unauthorized invoking function for the target mini program; and

determining whether content invoked by the target mini program includes non-compliant content.

17. The non-transitory computer-readable storage medium according to claim 16, wherein the determining whether the target mini program includes a payload comprising:

parsing codes and data in a load of the target mini program; and

comparing the parsed codes and data with samples of known payloads.

18. The non-transitory computer-readable storage medium according to claim 16, wherein the determining whether content invoked by the target mini program includes non-compliant content comprising:

parsing media and text content invoked by the target mini program; and

comparing the parsed media and text content with non-compliant content samples.

19. The non-transitory computer-readable storage medium according to claim 15, wherein the security loophole scanning on the target mini program comprises one or more of:

determining whether the target mini program includes a sensitive information leaking loophole;

determining whether the target mini program includes an HTML code loophole;

determining whether the target mini program includes a JS code loophole; and

determining whether the target mini program includes an unauthorized external resource reference loophole.

20. The non-transitory computer-readable storage medium according to claim 15, wherein the security loophole scanning on a server interface of the target mini program comprises:

parsing the server interface of the target mini program; and

performing interface loophole scanning on the parsed server interface.