Detection method and system for WEB application system content change

Abstract

The invention provides a detection method and system for WEB application system content change. The detection method and system stores grasped website webpage content into a detection page storage repository with a page file as a unit and records the frequency that the website is detected; by utilizing the stored detection frequency and the existence of the grasped page file, whether the website is a new website and whether the webpage is a new page are judged; whether storage elements contained inside the page file are the same as storage elements contained in a webpage file stored in the past is judged, and if the detection result is that change occurs, the detection result is output. The detection method and system for WEB application system content change carries out all-around detection on the WEB application system content, and accurately positions the specific reason why the webpage content changes on the aspects of webpage feature library codes, webpage content elements and webpage dynamic or static content, thereby obtaining the accuracy of webpage detection and bringing convenience to the detection of WEB application system content change.

Description

technical field [0001] The invention relates to the field of network security, in particular to a method and system for detecting content changes in a WEB application system. Background technique [0002] The content change of the webpage mainly judges whether it is a new page or whether the content of the page has changed, detects that the page has been tampered with through relevant technologies, locates the specific problem of the tampered page, and makes an early warning response. In the existing technology, technologies such as plug-in polling technology, core embedded technology, and time-triggered technology are mainly used to detect changes in web page content. These three technologies are useful in detecting web page content, such as accessing tampered web pages and protecting dynamic content , server load, bandwidth usage, and protection when disconnected have their own advantages and disadvantages. [0003] However, whether it is plug-in polling technology, core ...

AI Technical Summary

Problems solved by technology

[0003] However, whether it is plug-in polling technology, core embedded technology or time-triggered technology, it is impossible to distinguish whether the page is newly added or tampered with. The in-depth mining and analysis of page content detection is not enough to accurately identify the specific reasons for page changes. The detection methods are not comprehensive enough, and they only detect from certain aspects, and there are technical dead ends, and the above three technologies do not record the attributes, feature codes, page elements and page decomposition content of the detected page, etc., and cannot locate and trace the source of page changes , in-depth analysis of the root cause of the change

Images