Journal of Information Security Reserach ›› 2025, Vol. 11 ›› Issue (E1): 14-.

Online:2025-12-20 Published:2025-12-20

基于LSTM的越权漏洞识别模型研究

刘煜张晓京聂滢姜宁任鹏程卢永頔

(中移动信息技术有限公司北京100089)

通讯作者: 刘煜工程师.主要研究方向为信息安全. liuyuit02@chinamobile.com
作者简介:刘煜工程师.主要研究方向为信息安全. liuyuit02@chinamobile.com 张晓京硕士，高级工程师.主要研究方向为网络通信、区块链、能力中台、信息安全. zhangxiaojing@chinamobile.com 聂滢高级工程师.主要研究方向为信息安全. nieying@chinamobile.com 姜宁硕士，工程师.主要研究方向为信息安全. jiangningit@chinamobile.com 任鹏程博士，工程师.主要研究方向为移动安全、AI安全. renpengcheng@chinamobile.com 卢永頔工程师.主要研究方向为信息安全. luyongdi@chinamobile.com

Abstract

摘要： 当前越权漏洞识别方法有人工判断方式和自动化工具判断方式.分析以上识别方法的优缺点，基于人工判断方式的关键指标，采用自动化工具的数据采集方法，结合长短期记忆神经网络，构建越权漏洞识别模型.该模型模拟人工判断越权漏洞的思维，同时结合自动化工具的数据采集方法，极大改善了自动化工具的识别率.实验表明，模型取得了正确识别率达95%的理想效果，证明了识别模型的有效性.

关键词: 自动化检测, 越权漏洞, 长短期记忆网络, 人工智能

CLC Number:

TP393.08

刘煜, 张晓京, 聂滢, 姜宁, 任鹏程, 卢永頔, . 基于LSTM的越权漏洞识别模型研究[J]. 信息安全研究, 2025, 11(E1): 14-.

[1]	. [J]. Journal of Information Security Reserach, 2025, 11(E2): 39-.
[2]	. [J]. Journal of Information Security Reserach, 2025, 11(E2): 97-.
[3]	. [J]. Journal of Information Security Reserach, 2025, 11(E1): 114-.
[4]	. [J]. Journal of Information Security Reserach, 2025, 11(E1): 139-.
[5]	. [J]. Journal of Information Security Reserach, 2025, 11(E1): 171-.
[6]	. [J]. Journal of Information Security Reserach, 2025, 11(E1): 229-.
[7]	. Research on Security Challenges and Countermeasures for Critical Information Infrastructure in the Artificial Intelligence Era [J]. Journal of Information Security Reserach, 2025, 11(12): 1087-.
[8]	. Research on Security Challenges and Countermeasures for Critical Information Infrastructure in the Artificial Intelligence Era [J]. Journal of Information Security Reserach, 0, (): 1087-.
[9]	. Robust Malicious Encrypted Traffic Detection Method Based on Dual Confidence Sample Selection [J]. Journal of Information Security Reserach, 2025, 11(10): 924-.
[10]	. DGA Domain Name Generation Method of BiLSTM Model Based on Bayesian HPO [J]. Journal of Information Security Reserach, 2025, 11(10): 950-.
[11]	. A Covert Backdoor Attack Method in Fewshot Class Incremental Learning [J]. Journal of Information Security Reserach, 2025, 11(9): 797-.
[12]	. Encrypted Traffic Detection Method Based on Knowledge Distillation [J]. Journal of Information Security Reserach, 2025, 11(8): 702-.
[13]	. Model of Insider Threat Behavior Detection Based on Graph Neural Network [J]. Journal of Information Security Reserach, 2025, 11(7): 586-.
[14]	. Security Resource Scheduling Methods in Virtualization Environment [J]. Journal of Information Security Reserach, 2025, 11(7): 652-.
[15]	. Authenticated Key Agreement Protocol for Postquantum Anonymous Communication [J]. Journal of Information Security Reserach, 2025, 11(7): 661-.

基于LSTM的越权漏洞识别模型研究

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics