Weakness detection identifies defects and vulnerabilities in your application at runtime. This feature checks for insecure configurations inside running applications, including misconfigured mainstream Java frameworks and weak passwords in applications and databases, helping you find weaknesses that attackers can exploit. This topic describes how to view application weaknesses.
Limits
Weakness detection is supported after application processes are added to the application protection feature and the RASP agent version is 0.5.0 or later. You can view the RASP agent version on the Application Configurations tab, in the instance details panel of the target application group. If the RASP agent version is earlier than 0.5.0, restart the application to automatically upgrade the version.
View weakness detection results
-
Log on to the Security Center console. In the top navigation bar, select the region of the asset you want to manage. You can select Chinese Mainland or Outside Chinese Mainland.
-
In the left-side navigation pane, choose Protection Configuration > Application Protection.
-
On the Weakness Detection tab, view the weakness data overview, weakness detection trend, weakness type distribution, and weakness detection event quantity distribution.
-
In the lower part of the Weakness Detection tab, view the list of applications with detected weaknesses.
-
Application Startup ID: a unique ID within each startup cycle of the application. You can use this ID to distinguish weaknesses detected across multiple startups of the same application.
-
Status: the handling status for weaknesses detected during this startup. When unconfirmed weaknesses exist, the status is To Be Confirmed. When all weaknesses are handled, the status is Confirmed.
-
-
Click the
icon to the left of an Application Startup ID to view the list of detected weaknesses. Click Details in the Actions column for the target weakness to view the weakness details.You can check the weakness description, fixing suggestion, and weakness location to determine the cause of the weakness and whether to fix it.
Weakness detection only supports alerts and does not support one-click fix. The expanded weakness list contains columns such as weakness name, weakness type, risk level, and status. The Actions column allows you to modify the risk status.
-
After confirming whether to fix the weakness, return to the weakness list. Click Modify Risk Status in the Actions column for the target weakness. In the Modify Risk Status dialog, set the risk status and remarks, and then click OK.
Supported risk statuses:
-
To Be Confirmed: Select this status when you cannot determine how to handle the weakness.
-
Confirmed: Select this status when you have confirmed how to handle the weakness.
-
False Positive: Select this status when the detected weakness does not exist or the details are incorrect.
-
Ignore: Select this status when you do not need to pay attention to the weakness.
-