KR100926735B1 - Web source security management system and method - Google Patents

Abstract

PURPOSE: A web source security management system and a method thereof are provided to carry out task history management about a web source operator and a weak point checked out about a web source by collecting and analyzing the web source information of the web server of a company or an organization. CONSTITUTION: A web server(100) stores web source. The web server manages the web source information about the stored web source. Based on the web source information transmitted from the web server, a management server(200) performs a source logic test and weak point test for a URL page by individual web source unit. The management server performs the source logic test and the weak point test for a URL page repeatedly.

Description

Web source security management system and method

The present invention relates to a web source security management system and method, and more particularly, to collect and analyze web source information of a web server owned by an enterprise or an organization, to manage work history for a web source worker, and to illegally perform an illegal worker for an abnormal worker. Web source integrated security management system and method to perform / modify / restore, web source vulnerability management that can perform vulnerability check on web source, and user control management to limit source work scope for each web source worker.

Web application refers to application software that can be used in a web browser over the Internet or an intranet, including web mail, online e-commerce and auctions, hypertext, internet bulletin boards, blogs, Various software for implementing functions such as Massive Multiplayer Online Role Playing Game (MMORPG) is included.

In general, web applications are developed through the planning, coding, testing, and operational phases. Web applications are most exposed to the outside of the system hierarchy, so most hacking is at the application level. This is done using.

Looking specifically at the vulnerabilities of such web applications, it is impossible to control when developers randomly access the source and change data according to frequent renewal or update during development stage such as planning stage or coding stage. In addition, since most of the generated files are developed for performance / function, they are inherently vulnerable to security. Therefore, source control management is needed to prevent future development vulnerabilities from being inherited.

In the test phase, generally, only performance / functionality tests are performed without a security review of a module, and the test server is transferred to a production server without a security vulnerability test. In this case, many security incidents occur during operation because the security test is not conducted. Therefore, a security test such as web vulnerability analysis is required before the transfer to the operation server.

In addition, in the operation stage, the operator generally cannot confirm in a timely manner whether the source file is actually running, and there is no specific way to recognize or respond to the overall security level. Therefore, there is a need for a web source work management system that can periodically collect and store web source status and cope with potential risks.

On the other hand, in terms of management, most companies and organizations that run web servers are poor in their professional security knowledge, especially in public organizations such as city / county / city municipalities or educational institutions. In some cases, such as medical colleges, research institutes, professors, and student homepages, there is no security. And, in reality, many security incidents occur in these blind spots, and therefore, web source management and web vulnerability management are urgently needed.

Therefore, as mentioned above, web applications have a weak side effect due to web vulnerabilities such as home page forgery / modulation, personal information exposure and theft, malware infection, etc., due to the inadequate application and management of consistent security policies especially when applying individual business and unit solutions. There is a serious level, and therefore, a web source security management system and method are required that can recognize and respond to security problems that may occur from the source file generation step by the developer to the test step and the operation step by the final administrator.

The present invention was created in response to the above-described needs, and an object of the present invention is to manage user rights, manage source operations, protect and recover source forgery and alteration, diagnose source code, and diagnose URL page vulnerability in which web source code is expressed. It is to provide a web source integrated security management system and method that can be integrated in one management server.

It is another object of the present invention to provide a web source security management system and method that can identify and correct vulnerabilities in advance in the development and testing phase prior to the operation phase through URL page inspection and single source inspection in which a single web source code is expressed. will be.

It is still another object of the present invention to provide a web source security management system and method that can complement a portion of a single diagnostic method by performing a source code vulnerability diagnosis and a URL page vulnerability diagnosis in which web source code is expressed. To provide.

It is still another object of the present invention to provide a web source security management system and method capable of controlling a system development life cycle (SDLC) by allowing an authorized user to modify / upload a file only through an authorized path. It is.

It is still another object of the present invention to provide a web source security management system and method capable of supporting immediate or follow-up actions by notifying administrators and developers of results after source code analysis in a development stage.

It is still another object of the present invention to provide a web source security management system and method that can notify administrators and developers of the results after analyzing a web vulnerability in a test step, and can support immediate or follow-up actions.

Another object of the present invention can be forcibly restored to a specific original file stored in the management server or notified to the administrator according to the abnormal user's work in the operation and management phase, and through the scanner (scanner) that is a regular / irregular vulnerability analysis tool It is to provide a web source security management system and method that can represent security safety as a statistic.

For this purpose, a web source security management system of one embodiment of the present invention includes a web server for storing a web source and managing web source information for the stored web source; And a management server that performs at least one of a source logic check and a web vulnerability check for the corresponding web source on an individual web source basis, based on the web source information transmitted from the web source.

Preferably, when the web server is requested to synchronize the web source from the management server, the web server transmits the corresponding web source information to the management server. In addition, the web server interoperates with the management server to monitor whether the web source information is changed, and when the web source information is changed, the web server receives and restores the web source from the management server.

The web server of one embodiment of the present invention includes a web source storage unit that stores a web source and provides a web source requested by a web browser; And a source control manager for managing web source information on the stored web source, wherein the source control manager transmits the corresponding web source information to the management server when synchronization of the web source is requested from the management server. .

In addition, the management server of one embodiment of the present invention includes a main security management unit that manages an access right to a web source by performing identification and authentication on a user; And an internal vulnerability management unit that performs at least one of a source logic check and a web vulnerability check for the web source on an individual web source basis based on the web source information on the web source.

On the other hand, the web source security management method of one embodiment of the present invention, a) analyzing the source code vulnerability for the web source uploaded to the management server; b) uploading the web source where the source code vulnerability analysis is completed to a web server; And c) analyzing a vulnerability of a URL page representing a web source uploaded to the web server.

Preferably, the process of analyzing the vulnerability of the URL page in which the web source is represented, collecting and storing the URL structure information from the web server; Adding a predetermined pattern to the page collected from the web server and transmitting the predetermined pattern to the web server; And analyzing the web vulnerability by determining whether the pattern is included in the page responded by the web server.

According to the present invention, the user authority management, source configuration management, source forgery / forgery protection and recovery, source code diagnosis, the URL page in which the web source code is expressed, etc. can be integrated in one management server.

In addition, according to the present invention, not only the entire URI stored in the web server can be checked by the external vulnerability management unit but also the vulnerability can be checked by the individual source unit by the internal vulnerability management unit, thereby testing the unit source developed by the developer. When uploading to a server or web server, vulnerability analysis is performed in real time by a single source checker, which can immediately identify a problem and fix it. As a result, since the source does not have to be placed on the test server and the whole diagnosis is not required after project development, the time required for source diagnosis can be reduced, and the load of vulnerability analysis work can be reduced.

In addition, according to the present invention, when uploading a unit source developed by a developer to a test server or a web server, a check is executed immediately by a single scan inspection unit to check a problem in real time by checking only a portion displaying the source as a URL. Therefore, it has the effect of checking and correcting the vulnerability in advance not only in the operation but also in the development and testing stages.

In addition, according to the present invention, by performing both the source code diagnosis and the vulnerability diagnosis of the URL page in which the web source code is expressed, it is possible to complement the part that one diagnosis method cannot detect, and to simultaneously execute a plurality of diagnosis methods. In this case, the security risk is calculated by weighting the check item, which has the effect of reporting more accurate results to the developer or administrator.

In addition, according to the present invention, by establishing the standards for home page source development and security, it is possible to control the home page source change and history management of the internal and external (outsourcing company) developers, and to identify and trace the home page source Can be secured. In addition, it can recognize and take measures for security vulnerabilities in each stage of home page source development, and it is possible to automatically back up the final home page source in operation and to automatically recover from unauthorized changes. In addition, it is possible to provide statistics and detailed information through the collective management of multiple homepages.

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings and preferred embodiments. For reference, detailed descriptions of well-known functions and configurations that may unnecessarily obscure the subject matter of the present invention will be omitted in the following description.

1 is a diagram illustrating a configuration of a network to which the present invention is applied.

Referring to FIG. 1, at least one web server and a management server managing the same are connected to each other through a network, and a developer or an administrator connects to the web server through the management server. The general user accesses a desired web server through a web browser mounted on a user computer or the like to obtain necessary information.

Here, the web source security management system according to the present invention may be composed of a web server and a management server, the web server collects the information of the stored web source to monitor the forgery / forgery, the management server to establish a security policy, audit It performs data inquiry, user interface for administrator (eg, Graphical User Interface), and vulnerability check function for web sources.

For reference, FIG. 1 illustrates a structure in which a developer and an administrator are directly connected to a management server and connected to a web server through a management server. The developer and the manager may be connected to a management server through a network, as well as a management server. You can also connect directly to the web server without going through.

Hereinafter, a web source security management system according to the present invention will be described in detail with reference to FIGS. 2 to 6.

2 illustrates a configuration of a web source security management system according to the present invention.

As shown in FIG. 2, the web source security management system according to the present invention includes a web server 100 in which a web source is stored and a management server 200 managing the web source.

First, the web server 100 is composed of a web source storage unit 110, a source control management unit 120, a communication unit 130, etc. to provide a web source stored in the web server 100 to a user computer, and the like Collect information from web sources to monitor forgery and forgery.

Specifically, the web source storage unit 110 stores a web source in a form such as Active Server Pages (ASP), Professional HTML Preprocessor (PHP), Java Server Pages (JSP) generated by a developer, and the user. If a web source requests from a computer or the like through a web browser, the web source is provided.

The source control management unit 120 controls a developer's arbitrary change to the web directory and the source file, secures traceability, and performs an integrity check function to automatically recover the unauthorized change of the web directory and the source file. In detail, the source control management unit 120 collects information (file name, data, etc.) of the inspection target directory when the synchronization of the inspection target directory of the web server 100 is requested from the management server 200, and manages the management server 200. To send). Based on the collected information, source information is periodically compared and monitored for changes, and if determined to be changed, it is restored to the original source stored through the source recovery function. In addition, the source management unit 213 of the management server 200 receives a command (source upload, source download, file generation, etc.) to perform a source change operation.

In addition, the communication unit 130 communicates with the communication unit 270 of the management server 200 and the like to upload / download a web source or transmit and receive web source information, and also provide a web source by communicating with a user computer connected through the Internet or the like. do.

On the other hand, the management server 200 is the main security management unit 210, secondary security management unit 220, internal vulnerability management unit 230, external vulnerability management unit 240, security auditing unit 250, log storage unit 260, The communication unit 270 is configured to perform functions such as user management, policy management, and source management.

Hereinafter, this will be described in detail with reference to FIGS. 3 to 6.

3 illustrates a detailed configuration diagram of the main security management unit 210 of the management server 200. As shown in FIG. 3, the main security management unit 210 includes an identification and authentication unit 211 and a user management unit ( 212), the source manager 213, the agent manager 214, and the like, thereby substantially controlling the management server 200 and performing major security management functions.

Specifically, the identification and authentication unit 211 identifies a user of a web source security management system such as an administrator or a developer, and performs a function such as system login through authentication management. The user manager 212 performs a function of managing a system user by registering, deleting, or changing a system user, and the source manager 213 may be managed by an administrator or developer or by a source control manager of the web server 100. A function of managing a web source collected through 110 and the like, and the agent manager 214 manages an agent by registering, deleting, or changing one or more web servers 100 managed by the management server 200. Perform management functions.

4 illustrates a detailed configuration diagram of the sub-security manager 220 of the management server 200. As shown in FIG. 4, the sub-security manager 220 includes an updater 221 and a reporter 222. By including the license verification unit 223, and performs the secondary security management function of the management server 200.

In detail, the update unit 221 performs a function of updating a new pattern and function addition, and the report unit 222 calculates the data (eg, statistics on the history for each development task, importance, etc.) requested by an administrator or developer. Value, etc.), and the license verification unit 223 performs a function of verifying a user-issued license using a CPU and a MAC address.

FIG. 5 illustrates a detailed configuration diagram of the internal vulnerability management unit 230 of the management server 200. As illustrated in FIG. 5, the internal vulnerability management unit 230 includes a single scan checker 231 and a single source checker ( 232), a dedicated communication unit 233, a rule setting management unit 234, etc., and performs an internal vulnerability management function that checks the vulnerability present in the web source logic by automatically / manually checking the source uploaded by the developer.

Specifically, if the single scan checker 231 does not check the vulnerability of the uploaded source, the single scan checker 231 checks the source history through log search and selectively performs the vulnerability check. At this time, the vulnerability check is performed on the source expressed in Uniform Resource Identifier (URI) format (path? Query). In this case, the web browser is used to check the URI of the uploaded source. That is, if the inspector or administrator selects a web page that has not been checked for vulnerabilities, the web page is loaded in the web browser, and the URI is collected by clicking a menu or page connected to the source. The collected information transmits a vulnerability pattern according to the check item and determines the vulnerability. More details on the web vulnerability checking method will be described later.

The single source inspector 232 inspects the source logic in real time without an administrator's intervention on the uploading source and searches for the location of a line that is securely in error. The source inspection method uses variable tracking to analyze the flow in which the variable is used, searches for and analyzes the use of vulnerable functions, procedures, etc., and searches for parts that match a single or multiple conditions. Can be used.

The dedicated communication unit 233 communicates with the dedicated communication unit 244 of the external vulnerability management unit 240 to transmit and receive information such as a scan test result.

The rule setting management unit 234 manages a rule for managing an internal vulnerability, such as adding a new rule and modifying / deleting an existing rule.

6 illustrates a detailed configuration diagram of the external vulnerability management unit 240 of the management server 200. As illustrated in FIG. 6, the external vulnerability management unit 240 includes an integrated scan checker 241 and a reporter 242. ), The update unit 243, the dedicated communication unit 244, the additional function unit 245, the rule setting management unit 246, and the like to check the entire Uniform Resource Identifier (URI). For reference, in FIG. 6, the external vulnerability management unit 240 is illustrated as existing outside the management server 200. The external vulnerability management unit 240 is implemented or managed as one component included in the management server 200. The server 200 may be implemented as a separate server or device.

Specifically, the integrated scan checker 241 collects the entire directory, page, and query structure of the domain through a crawl process of collecting the entire URI when the check domain is set, and collects the collected URI. Based on the information, the vulnerability is determined based on the check items shown in Table 1, for example.

[Table 1] Web Vulnerability Check Items

The report unit 242 reports a data (eg, a web security vulnerability check result, check history statistics, etc.) requested by an administrator or developer.

The update unit 243 performs a function of updating a new pattern, adding a function, and the like.

The dedicated communication unit 244 communicates with the dedicated communication unit 233 of the internal vulnerability management unit 230 to transmit information such as an integrated scan test result. In addition, when the external vulnerability management unit 240 is implemented as a separate server or device, the dedicated communication unit 244 communicates with the communication unit 130 of the web server 100 and the web source stored in the web source storage unit 110 and Collect information about this.

The additional function unit 245 provides additional functions to the developer or the administrator, such as a proxy function, a string encoding and decoding function, and a work time setting function, which provide an environment in which a user can directly perform a test.

The rule setting management unit 246 manages a rule for managing external vulnerabilities such as adding a new rule and modifying / deleting an existing rule.

Referring back to FIG. 2, the security audit unit 250 stores an event generated by a system module and provides an administrator search function.

In detail, the security auditing unit 250 may view the source history, view the author's source creation / modification / deletion / download, view the unauthorized author's source creation / modification / delete / download, and view the automatic recovery history of the abnormal change source. View administrator intervention recovery history for normal and abnormal change sources, view vulnerable folders and file status, view integrated domain vulnerability results, compare vulnerability results by integrated domain period, view unit domain vulnerability results, compare vulnerability results by unit domain period, and set domain management Provides functions such as change log search and user management setting change log search.

The log storage unit 260 stores the collected security log periodically or according to the setting in association with the main security management unit 210, the security audit unit 250, and provides it if necessary.

Finally, the communication unit 270 communicates with the communication unit 130 of the web server 100 to upload / download a web source or to transmit and receive web source information. In addition, the communication unit 270 is a developer or administrator through the user interface (eg, Window GUI), such as the main security management unit 210, secondary security management unit 220, internal vulnerability management unit 230, external vulnerability management unit 240 To be able to access the security management unit 250.

Hereinafter, a web source security management method according to the present invention will be described with reference to FIGS. 7 and 8. For reference, the web source security management method according to the present invention may be performed, for example, in the web source security management system described above, and a specific process or operation principle for the web source security management method is described in the above-described web source security management system. See.

7 is a flowchart illustrating a web source security management method according to an embodiment of the present invention. For reference, this embodiment illustrates a process in which source code and web vulnerability analysis are performed when a developer or an administrator uploads a web source to a web server.

First, in step S710, the developer or the administrator logs in to the management server through user authentication. Here, user authentication may be performed in the main security management unit (particularly, the identification and authentication unit) of the management server.

When the user authentication is completed, in step S720, the user (developer or administrator) is a web source file such as creating / editing / deleting, uploading, downloading, creating / modifying / deleting a directory, changing a file name, etc. through a dedicated web console, or the like. To do development work.

In step S730, the developer or the administrator uploads the generated or edited web source file to the management server. In this case, the uploaded web source file may be stored in the main security management unit (in particular, the source management unit) of the management server along with the history thereof.

In step S740, the management server performs source code vulnerability analysis of the uploaded web source file, and stores the history and results. In this case, source code vulnerability analysis may be performed by the internal vulnerability management unit (specifically, a single source checker) of the management server. If, as a result of source code vulnerability analysis, a vulnerability of the source code is found, the secondary security management unit (specifically, the reporting unit) of the management server reports the fact to the developer or administrator through the communication unit, and the developer or administrator Source code vulnerability analysis is repeated until the vulnerability is resolved through editing.

When the source code vulnerability analysis is completed, in step S750, the management server uploads the web source file to the web server.

Then, in step S760, the web server (specifically, the source control manager) checks whether a web source file of the same name exists before storing the newly uploaded web source file in the web source storage, and if the web source storage is If a web source file with the same name exists in, back up the web source file and save the history. In this way, the developer or the administrator can restore the backed up web source files.

In step S770, the management server performs a web vulnerability analysis on the newly created or changed web source file or the entire domain content, and stores the history and results. For reference, in this case, web vulnerability analysis for the entire contents of the domain may be performed by the integrated scan checker of the external vulnerability management unit, and web vulnerability analysis of individual web source files may be performed by a single scan checker of the internal vulnerability manager.

On the other hand, the detailed work history and vulnerability analysis results carried out in each step so far is preferably stored in real time, and in step S780, at the request of the developer or administrator generates a detailed report of the detailed work history and vulnerability analysis, etc. Report the results.

8 is a flowchart illustrating a preferred web vulnerability checking method applied to the web source security management method according to the present invention shown in FIG.

First, in step S810, the management server collects URL structure information while tracking the link. In step S820, the URL structure information collected from the web server is received. In step S830, the collected URL structure information is stored in the database.

On the other hand, in step S840, the management server adds a pattern to the collected page (part of the URL structure information). Here, the pattern addition may be performed by, for example, modulating a string of original parameters to generate a parameter modulation string, and adding the generated parameter modulation string to the collected page. In operation S850, the management server transmits the pattern by transmitting the page to which the parameter modulation string is added to the web server.

In step S860, the management server performs a web vulnerability check to store a page with a predefined string in the page responded by the web server in the database. In step S870, relevant information about the web vulnerability analysis is reported to the developer or administrator.

Meanwhile, the method for managing web source security according to the present invention may be implemented through a computer readable recording medium including program instructions for performing operations implemented by various computers. The computer-readable recording medium may include program instructions, data files, data structures, etc. alone or in combination. The recording medium may be one specially designed and configured for the present invention, or may be known and available to those skilled in computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tape, optical recording media such as CD-ROMs, DVDs, magnetic-optical media such as floppy disks, and ROM, RAM, flash memory, and the like. Hardware devices specifically configured to store and execute the same program instructions are included. Examples of program instructions include not only machine code generated by a compiler, but also high-level language code that can be executed by a computer using an interpreter or the like.

Although the present invention has been described in detail with reference to preferred embodiments, it will be apparent to those skilled in the art that the present invention may be embodied in other specific various forms without changing the technical spirit or essential features of the present invention. One embodiment is to be understood in all respects as illustrative and not restrictive.

In addition, the scope of the present invention is specified by the appended claims rather than the detailed description, and all changes or modifications derived from the meaning and scope of the claims and equivalent concepts are included in the scope of the present invention. Should be interpreted as

1 is a diagram illustrating a configuration of a network to which the present invention is applied.

2 is a block diagram of a web source security management system according to the present invention.

3 is a detailed configuration diagram of the main security management unit of FIG. 2.

FIG. 4 is a detailed configuration diagram of the secondary security manager of FIG. 2.

5 is a detailed configuration diagram of the internal vulnerability management unit of FIG. 2.

6 is a detailed configuration diagram of the external vulnerability management unit of FIG. 2.

7 is a flowchart of a web source security management method according to the present invention.

8 is a flowchart illustrating a web vulnerability checking method according to the present invention.

Claims (26)

delete A web server that stores a web source and manages web source information for the stored web source; And On the basis of the web source information transmitted from the web server, a management server that performs at least one of the source logic check for the corresponding web source and the URL page vulnerability check in which the individual web source is expressed in units of individual web sources, The management server is a web source security management system, characterized in that for performing the source logic check and the URL page vulnerability check that the individual web source is expressed. The method of claim 2, And the web server transmits the web source information to the management server when the synchronization of the web source is requested from the management server. The method of claim 2, The web server monitors whether the web source information is changed in association with the management server, and if the web source information is changed, the web source security management system receives and restores the web source from the management server. The method according to any one of claims 2 to 4, The management server uses at least one of a method of analyzing a flow in which the variable is used using variable tracking, a method of searching for and analyzing a use of a vulnerable function or procedure, and a method of searching and analyzing a part matching a predetermined condition. And performing the source logic check using the web source security management system. The method according to any one of claims 2 to 4, The management server adds a predetermined pattern to the web page collected from the web server, transmits the predetermined pattern to the web server, and performs the vulnerability check by determining whether the pattern is included in the web page responsive to the web server. Web source security management system. The method of claim 6, And the pattern is a parameter modulation string. The method according to any one of claims 2 to 4, The management server is a web source security management system, characterized in that for managing the registration, change, deletion of the web source stored in the web server through user authentication. The method according to any one of claims 2 to 4, The management server is a web source security management system, characterized in that for additionally performing a full URL page vulnerability check expressed in units of the entire web source. The method of claim 9, The management server reports source logic checks performed by individual web source units, URL page vulnerability test results expressing individual web sources, and overall URL page vulnerability test results expressed in total web source by applying weights for each check item. Web source security management system, characterized in that. delete A web source storage unit for storing a web source and providing a web source requested by a web browser; And A source control manager for managing web source information on the stored web source, The source control management unit transmits the corresponding web source information to the management server when the synchronization of the web source is requested from the management server, monitors whether the web source information is changed in association with the management server, and when the web source information is changed, Receiving a web source from a management server and restoring a web source stored in the web source storage unit. A main security management unit for managing access to a web source by performing identification and authentication on a user; And Based on the web source information on the web source, the internal vulnerability management unit for performing at least one of the source logic check and the URL page vulnerability check for the individual web source is expressed for the respective web source unit, The internal vulnerability management unit adds a predetermined pattern to a web page collected from a web server, transmits the predetermined pattern to the web server, and performs the vulnerability check by determining whether the pattern is included in the web page responsive to the web server. Characterized by management server. The method of claim 13, The internal vulnerability management unit uses variable tracking to analyze at least one of a method of analyzing a flow in which the variable is used, a method of searching for and analyzing a use of a vulnerable function or procedure, and a method of searching for and analyzing a part matching a predetermined condition. The management server, characterized in that for performing the source logic check. delete The method according to claim 13 or 14, And an external vulnerability management unit for performing a full URL page vulnerability check expressed in units of entire web sources for the web server where the web source is stored. The method of claim 16, Source logic check performed by the internal vulnerability management unit on an individual web source basis and URL page inspection results representing an individual web source and total URL page vulnerability inspection results expressed on an entire web source basis by the external vulnerability management unit are weighted by each check item. The management server, characterized in that it further comprises a secondary security management unit for reporting. The method according to claim 13 or 14, View source history, view automatic recovery history for abnormal change sources, view administrator intervention recovery history for normal and abnormal change sources, view vulnerable folders and files, view integrated domain vulnerability results, compare vulnerability results by integrated domain period, unit domain And a security audit unit configured to perform at least one function of viewing vulnerability results, comparing vulnerability results by unit domain period, domain management setting change log search, and user management setting change log search. a) analyzing source code vulnerabilities for web sources uploaded to the management server; b) uploading the web source where the source code vulnerability analysis is completed to a web server; And c) analyzing a URL page vulnerability in which the web source uploaded to the web server is represented. The method of claim 19, wherein after step b) B) the web server checks whether a web source of the same name as the uploaded web source is already stored, and if a web source of the same name is already stored, backs up the uploaded web source to the management server. Web source security management method further comprising the step of transmitting. The method of claim 19, wherein step c) And performing at least one of analyzing a URL page vulnerability expressed in individual web source units and analyzing a whole URL page vulnerability expressed in whole web source units. The method of claim 21, wherein analyzing the URL page vulnerability expressed in individual web source units is as follows. Collecting and storing URL structure information from the web server; Adding a predetermined pattern to the page collected from the web server and transmitting the predetermined pattern to the web server; And And analyzing web vulnerabilities by determining whether the pattern is included in the page replied by the web server. The method of claim 22, And the pattern is a parameter modulation string. The method of claim 19, wherein after step c) and d) reporting the source code vulnerability analysis result and the URL page vulnerability analysis result in which the web source is expressed by applying a weight to each check item. The method of claim 19, Source code vulnerability analysis of step a) is characterized in that the web source security management method is performed in real time. A computer-readable recording medium having recorded thereon a program for performing the method for managing web source security according to any one of claims 19 to 25.

Images