Webpage watermark generation and authentication method capable of positioning and tampering positions on a browser

Abstract

The invention discloses a webpage watermark generation and authentication method capable of positioning and tampering positions on a browser. The method includes: partitioning webpage source codes combining character blocks displayed by the browser to enable sub-blocks to contain browser display characters; then extracting a non-label portion and an attribute value portion in a label of each sub-block to generate 12-bit watermark information, randomly embedding the watermark information into another sub-block by a color attribute method; comparing the consistency of an extracted watermark and a reconstructed watermark of each sub-block during detection so as to judge whether the sub-block is tampered or not; and finally detecting the label of the tempered sub-block, substituting the marking attribute for all attributes of the tempered sub-block, and substituting prompt information for the display characters in the sub-block on the browser. By the method, when partial content in a webpage is tempered, no-break of Web service can be maintained, information not tempered can be used continuously, error information can be prevented from spreading timely, and negative effect and loss of reputation and business of enterprises and public institutions due to webpage tempering are reduced.

Description

technical field [0001] The invention relates to a method for generating and authenticating a webpage watermark capable of locating a tampered position on a browser. Background technique [0002] With the rapid development of network and multimedia technology, information hiding technology has become an important part of information security. At present, there are many research results on information hiding of digital media such as image, audio, video, etc., but there are relatively few researches on information hiding technology of web pages. According to the statistics of the National Internet Emergency Response Center (CNCERT), in December 2011, the number of tampered websites in mainland China was 2,016, of which 163 were tampered with government websites. Frequent incidents of tampering with government and enterprise websites have seriously affected the image of the government and the normal business progress of enterprises and institutions. As a method to effectively ...

AI Technical Summary

Problems solved by technology

The above two algorithms can only detect whether the webpage has been tampered with, but cannot locate the tampered position of the webpage

In order to locate where the webpage has been tampered with, Zhang et al. proposed a webpage watermarking algorithm based on the HASH function (Zulin Zhang, Hong Peng, XianzhongLong. A Fragile Watermarking Scheme Based On Hash Function for Web Pages[C], 2011 International Conference on Network Computing and Information Security (NCIS), Guilin, China, 2011: 417-420.), this algorithm encrypts each line of original code characters and each word displayed on the browser through HASH encryption to generate 6-bit watermark information, using tag case The method combined with invisible characters embeds the watermark, so the algorithm can detect and locate the tampered characters in the source code of the webpage, but the algorithm cannot locate and mark the tampered position on the browser

[0004] Another issue that needs to be considered in the practical application of web page fragile watermarking technology is: when the web page watermark algorithm detects that the web page has been tampered with, how should the system respond?

However, from the discovery of web page tampering to the restoration of the web page, the system may respond to user requests in two ways: (1) stop the web service of the entire website, that is, the user will not get any response information when requesting a web page with tampered web page, and the web page A lot of information that has not been tampered with in the website cannot be transmitted to users, which greatly reduces the information transmission efficiency and real-time interactivity of the website, and may cause serious negative impacts and losses on the reputation and business of enterprises and institutions

(2) Continue the web service of the website. When the webpage that has been determined to be tampered responds to the user's request, even if the algorithm can accurately locate the source code location of the tampered webpage, the tampered information in the webpage is still there before the backup webpage is called to restore It will continue to spread, and it will also cause serious negative impacts and losses on the reputation and business of enterprises and institutions

Images