检测结果解析

检测结果的组成

检测结果分为三部分固件基本信息、检测结果统计和检测风险列表。例如：

{
    "fwBasicInfo": {  //固件基本信息
        "fwFileSize": 0,
        "arch": "",
        "fwSha256": "",
        "filesystem": "",
        "scanStartTime": 0
    },
    "riskStatistics": {  //检测结果统计
        "severityStatistics": [  //风险等级漏洞数统计
            { "name": "严重", "count": 0 },
            { "name": "高危", "count": 0 },
            { "name": "中危", "count": 0 },
            { "name": "低危", "count": 0 },
            { "name": "通告", "count": 0 }
        ],
        "riskBrief": [  //按风险等级及分类统计
            {
                "risks": [{"riskType": "", "suggestion": "", "count": 0, "description": ""}],
                "name": "严重", "count": 0
            }
        ]
    },
    "risks": [  //检测风险列表
        {
           "name": "",  "code": "", "enCategory": "", "category": "",
           "description": "", "suggestion": "",
           "vulnInfos": [
                {
                    "severity": "", "filename": "",
                    "detail": [],
                    "cve": {}
                }
            ]
        }
    ]
}

固件基本信息

基本信息的key为“fwBasicInfo” ，类型为JSONObject。格式为：

 "fwBasicInfo": {
        "fwFileSize": 0,
        "arch": "",
        "fwSha256": "",
        "filesystem": "",
        "scanStartTime": 0
    }

字段定义参考：

检测结果统计

检测结果统计的key为“riskStatistics”，类型为JSONObject。格式为：

"riskStatistics": {
        "severityStatistics": [  //风险等级漏洞数统计
            { "name": "严重", "count": 0 },
            { "name": "高危", "count": 0 },
            { "name": "中危", "count": 0 },
            { "name": "低危", "count": 0 },
            { "name": "通告", "count": 0 }
        ],
        "riskBrief": [  //按风险等级及分类统计
            {
                "risks": [{"riskType": "", "suggestion": "", "count": 0, "description": ""}],
                "name": "严重", "count": 0
            }
        ]
    }

检测结果统计分为2部分：

1）风险等级漏洞数统计：按风险等级统计的当前固件风险结果，风险等级分为严重、高危、中危、低危和通告。key为severityStatistics，类型为JSONArray，每个item格式为：

2）按风险等级及分类统计：按风险等级及分类统计的当前固件风险结果，每个风险等级下检测到了哪些风险类型及风险数量等。 key为riskBrief，类型为JSONArray，每个item格式为：

risks格式为：

检测风险列表

检测结果统计的key为“risks”，类型为JSONArray，格式如下：

"risks": [
        {
            "name": "",  "code": "", "enCategory": "", "category": "",
            "description": "", "suggestion": "",
            "vulnInfos": [
                {
                    "severity": "", "filename": "",
                    "detail": [],
                    "cve": {}
                }
            ]
        }
    ]

字段定义如下：

VulnInfo定义如下：

detail字段，保存检测到的非CVE漏洞的详细信息，定义如下：

cve字段，保存检测到的CVE漏洞的详细信息，定义如下：

cpe结构说明：

"cpe": {
  "cpeName": "",
  "cpeType": "",
  "allFixedVersion": {
    "expression": "",
    "version": ""
  },
  "highCriticalFixedVersion": {
    "expression": "",
    "version": ""
  }
}