Script injection attack detection method and system

Abstract

A script injection and attacking detection method and a system belong to the technical field of computing network, wherein the method comprises requesting and obtaining by HTTP, extracting user input data from HTTP request, doing script injection and attacking detection to user input data, and alarming script injection and attacking affairs and the like, wherein script injection and attacking detection step to user input data comprises decoding user input data, analyzing document object model structure, extracting document object model script and detecting script grammar and the like. The script injection and attacking detection system comprises an HTTP requesting and obtaining module, a user inputting data extraction module, a script injection and attacking module and a script injection and attacking alarm module, wherein the script injection and attacking detection module comprises a user input data decoding module, a document object model structure analyzing module, an injection script extracting module and a script grammar detecting module. The script injection and attacking detection method and the system are suitable for applying in Web service security insurance products.

Description

technical field [0001] The invention relates to a script injection attack detection method and system, belonging to the technical field of computer networks. Background technique [0002] Since the birth of Web technology, the Internet has developed rapidly, and Web services have become the most important way to provide network content in the Internet. With the development of Web technology, the Web no longer only provides static content services for Internet users, but can provide various dynamic Web content services according to user needs. Due to the advantages of easy deployment and use of Web services, many traditional client / server applications have begun to be transformed into Web-based applications, including those applications such as electronic banking and electronic securities that have very high security requirements. [0003] While Web service brings convenience to people's life and work, it also brings a lot of security problems. These security issues include...

AI Technical Summary

Problems solved by technology

Among them, the script execution prohibition method is to completely or partially prohibit the execution of the script on the Web client, which will make some Web content cannot be displayed correctly; the HTTP response message purification method is to filter and clean the Web page content returned from the Web server. Delete those scripts that may endanger the security of the client. The disadvantage of this method is that the content of the web page cannot be rendered correctly due to unclean data cleaning or excessive cleaning; the data flow tracking method of the web client includes static data flow tracking based on the source code level and Based on the tracking and analysis method of input data flow and output data flow, this method needs to modify the web client software, which is difficult to deploy and implement

Images