An intrusion detection method and device based on browser tag attributes

Abstract

The invention discloses an intrusion detection method and device based on browser label attributes. The intrusion detection method includes: detecting the attribute of a first label according to a first rule to determine whether the first label is a malicious label, and the first label includes at least one of an iframe label, an img label and an embed label; according to the first rule The second rule detects the attribute of the second tag to judge whether the second tag is a malicious tag, and the second tag includes at least one of the SCRIPT tag and the CSS tag; detects the attribute of the third tag according to the third rule to judge whether the second tag is a malicious tag. Whether the third tag is a malicious tag, the third tag includes a div tag; the attribute of the fourth tag is detected according to the fourth rule to determine whether the fourth tag is a malicious tag, and the fourth tag includes a form tag ; and detecting the attributes of the fifth tag according to the fifth rule to determine whether the fifth tag is a malicious tag.

Description

technical field [0001] The invention relates to the field of information security, in particular to an intrusion detection method and device based on browser label attributes. Background technique [0002] With the wide application of Internet technology, more and more information resources are shared through Web services. For example, various applications in the process of enterprise informatization choose the Web platform for erection. In addition, Internet products such as social networks and microblogs have been rapidly applied, making web browsing the most frequently used network service on the Internet. An effective propagation route exploited by malicious code. [0003] Among these malicious attacks, XSS (Cross Site Scripting, cross-site scripting attack) and CSRF (Cross-site Request Forgery, cross-site request forgery) are very harmful. Among them, XSS refers to malicious attackers inserting malicious html codes into web pages. When the user browses the page, the ...

AI Technical Summary

Problems solved by technology

[0004] However, due to the diversity of attack methods, anti-virus service providers in the prior art cannot effectively detect and contain network attacks represented by XSS and CSRF

Images