Revealing security vulnerabilities of chinese local government websites through topology analysis and knowledge graph

Abstract

As the Internet evolves, governments worldwide, including China, are digitalizing their services. However, in China, the technical disparity among local government websites is significant due to the vast number of local governments, their geographic spread, and varying regional economies. This disparity leads to considerable security risks. Our study involved topological analysis and knowledge graph construction to evaluate these websites, uncovering numerous security vulnerabilities such as data leaks, unauthorized access, and code execution. These findings highlight critical gaps in security measures. Knowledge graphs were instrumental in visualizing and analyzing these vulnerabilities and devising resolution strategies. This approach not only facilitates prompt identification and rectification of issues but also supports the development of robust long-term security strategies. Moreover, it serves as an educational tool for local government technical teams to learn and implement security best practices. Our analysis offers valuable insights and guidance for enhancing the security of Chinese local government websites, aiming to strengthen data and information protection for citizens.