Webpage security detection method and system

Abstract

The invention discloses a webpage security detection method and system. The method comprises the following steps of: when switching on a browser, initializing a browser embedment plug-in which is pre-embedded in the browser; controlling the browser to gradually access a webpage, on which addresses of webpage to be detected are centralized, corresponding to each address of the webpage to be detected through the browser embedment plug-in; monitoring a process of accessing the webpage by the browser through an antivirus program, triggering to alarm when the antivirus program captures virus, Trojan virus or malicious feature codes of the present webpage, and recording an alarm logging; and generating a corresponding detection report of the webpage according to the alarm log. According to the webpage security detection method, the cost of the webpage security detection is reduced and the integrity of the webpage security detection is improved.

Description

technical field [0001] The invention relates to Internet security technology, in particular to a web page security detection method and system. Background technique [0002] With the increasing development of the Internet, the market value of the Internet is increasing, and the phenomenon of virus transmission and intrusion targeting Internet users is becoming more and more serious. According to data, the number of Trojan horses on major websites in my country has increased sharply. In 2009, there were more than 2.46 million new Trojan horses, which was 5.5 times that of 2008. Using web pages to hang Trojan horses has become the main way for Internet viruses to spread. [0003] The so-called webpage hanging horse refers to uploading a Trojan horse program to a certain webpage, and then using a Trojan horse generator to generate a net horse, and then adding code on the webpage to make the Trojan horse run when the webpage is opened. Malicious Trojan horses forcibly embed mal...

AI Technical Summary

Problems solved by technology

[0005] In the process of practicing the existing technology, the inventor found that using the existing webpage security detection technology to scan webpage Trojan horses has defects such as high cost and insufficient detection integrity

For example: the existing webpage security detection technology needs to develop and maintain a Trojan horse signature database. When a new Trojan horse that is not recorded in the Trojan horse signature database is found, the features of the new Trojan horse need to be added to the Trojan horse signature database in time, otherwise the detection system may not be able to recognize it; However, developing and maintaining such a comprehensive and accurate Trojan horse feature library requires huge manpower and material resources, and ordinary vendors that provide trusted website services are usually unable to do so.

Another example: some malicious feature codes embedded in web pages usually need to be combined with the browser's parsing engine or script (javascript) engine to play a role, and the existing web security detection technology downloads the captured pages to the local area for scanning and detection, so it cannot identify these malicious signatures

Images