Method and device for detecting black chain

Abstract

The invention provides a method and a device for detecting a black chain. The method comprises generating black chain characteristic data; searching a page containing the black chain characteristic data as a target page; analyzing the layout of the black chain characteristic data in the target page, and extracting page elements containing the black chain characteristic data from the target page when the layout is abnormal; and generating black chain rules according to the page elements. By means of the method and the device for detecting the black chain, efficiency, credibility and accuracy of the detection of the black chain are improved under the premise of reducing cost and manual intervention as low as possible.

Description

technical field [0001] The present application relates to the technical field of computer security, in particular to a black chain detection method and a black chain detection device. Background technique [0002] Black chain, also known as "Internet psoriasis". It is well known that the search engine has a ranking system, and the search engine considers a good website to be higher in the ranking of the search results, and correspondingly, the click-through rate of the website will be higher. There are many indicators for search engines to measure the quality of a website, and one of the most important points is the external links of the website. If a website has good external links, then the ranking of the website in search engines will increase accordingly. [0003] For example, if a newly opened website ranks very low in the search engine, and then a website with high authority (high ranking, high quality) links to the newly opened website, then the search engine will t...

AI Technical Summary

Problems solved by technology

[0012] 1) Only feature strings rely heavily on manual collection, the update of feature strings cannot keep up with the update of tampered content, and detection always lags behind;

[0013] 2) High false alarm rate: similar keywords and feature strings may also appear on normal websites, such as news websites, so simple feature string matching will lead to high false positive rate;

[0015] 1) The complexity and maintainability of the website content publishing system are greatly increased. If there is a problem in one link, it will lead to large-scale false positives;

[0016] 2) The requirements for the quality of website management personnel have been greatly improved, and at the same time, the cost of system learning and workload have been increased;

[0017] 3) It is difficult for the automatically published dynamic webpage content to be approved, resulting in a decrease in website work efficiency;

[0018] 4) Since the website needs to purchase special software and hardware, the website needs to increase a large amount of cost;

[0019] 5) In the actual situation where the webpage is tampered with by the black link, it is often caused by a problem with the website security, so the fingerprint database of the webpage content may also be inaccurate, resulting in large-scale false positives or missed negatives

Images