A method and system for web page backdoor detection based on non-credit

Abstract

The invention discloses a webpage backdoor detection method and system based on non-credit-granting. The method includes the steps that firstly, a credit-granting framework and a non-credit-granting framework of a website are established; URLs and URL pages in the website are traversed and recognized sequentially, whether the URLs are in the credit-granting framework or not is judged, if the URLs are in the non-credit-granting framework, whether the URLs are completely matched with the URL pages stored in the credit-granting framework in related attribute or not is judged, if the URLs are not completely matched with the URL pages stored in the credit-granting framework in related attribute, the URL pages are tampered, and related processing operations are conducted; if the URLs are not in the credit-granting framework, the hashed values of the URL pages are calculated, whether the URLs are in the non-credit-granting framework or not is judged, if the URLs are in the non-credit-granting framework, the URL pages are webpage backdoors, otherwise, whether the URL pages have website script characteristics and executable permissions or not is judged, and further judgment is conducted. According to the technical scheme, the webpage backdoor detection method and system can perform effective reorganization on the webpage backdoors in the non-credit-granting framework, and the webpage backdoors comprise unknown or encrypted webpage backdoors. According to the webpage backdoor detection method and system, the detection efficiency is high, the false alarm rate is low, and implementation is more convenient.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method and system for detecting webpage backdoors based on non-trust. Background technique [0002] With the continuous development of the Internet, it has been widely popularized in various fields of society, and it has also promoted the rapid development of the communication industry. The Internet is a large platform for information sharing, and this large platform is built by countless websites. The website is developing toward diversification, showing more and more content, and the display form is getting better and better. However, while the functions of the website are constantly enriched, the vulnerability of security is also constantly exposed. There are many examples of attackers exploiting vulnerabilities to attack websites. After an attacker attacks a website, they will often upload a webpage backdoor to the website for subsequent manipulation of the webs...

AI Technical Summary

Problems solved by technology

[0003] Existing webpage backdoor detection technologies usually use feature code detection. This detection method extracts features from many known webpage backdoor codes, and can detect known webpage backdoors, but lacks effective detection of unknown and encrypted ones. The detection of web backdoors can be regarded as the release of these two types of web page backdoors. This detection method is extremely inefficient

Images