Webpage trojan-linking real-time protection method and system based on cloud

Abstract

The invention discloses a trojan-linking protection method and system based on cloud. The system comprises a cloud service registration module, a trojan-linking link detection analysis module, and a real-time protection module. A web server is registered to a cloud platform through the cloud service registration module. Through DNS agent analysis, requests and response data flows of the web server are all forwarded to the cloud platform for safe processing. The trojan-linking link detection analysis module detects trojan-linking links through analyzing characteristics and behavior information such as webpages and link elements. Request to intercept is conducted on the webpage trojan-linking links through the real-time protection module. The method and system can block trojan linking links in the web server protected by the cloud platform in real time, prevent trojan-linking sources from spreading, does not change browse habits of a client side due to the fact that no installation software needs installing at the client side and a server side, and is transparent in version and configuration of the web server.

Description

technical field [0001] The invention relates to the field of computer network security, in particular, to a cloud-based real-time protection method and system for web page Trojan horses. Background technique [0002] Web page Trojan is a web service-based network attack against customers. The hacker first breaks through the web server and adds the webpage Trojan horse to the normal HTML page. When a client visits this page, the webpage Trojan horse will be transmitted back to the client machine together with the normal HTML page, and the system vulnerability of the client terminal will be used to automatically download and execute the remote machine. Malicious code on the computer can completely control the customer's machine. The personal account information on the customer's machine may be obtained by hackers, resulting in the loss of the customer's personal property. Moreover, the client machine may be controlled by hackers for a long time and be added to the botnets wh...

AI Technical Summary

Problems solved by technology

[0007] It can be seen from the analysis that none of the above three methods can carry out real-time protection against web page malware, and most of the websites built and hosted on the cloud platform provide external network access services, which have a wide range of influence. Therefore, it is necessary to solve the problem of website servers in the cloud platform environment. The problem of real-time protection against web page malware is of great significance

Images