Webpage tamper-resistant method based on file-driven watermark comparison

Abstract

The invention relates to a webpage tamper-resistant method based on file-driven watermark comparison. The webpage tamper-resistant method comprises the following steps: 1, when a driving program installed on a server side monitors that a webpage is accessed, a kernel layer captures an IRP (I/O Request Package) request; 2, judging whether the conditions that a process of initiating the IRP request is an appointed Web container process, the IRP request is for a purpose of reading a file and the file read by the IRP request is a file needing to be protected by a user are simultaneously met or not, starting watermark comparison when the three conditions are met and turning to the next step, and normally releasing as long as one condition is not met; 3, calculating watermarks of the webpage file, comparing the calculated water marks with backup watermarks in a watermark library, if the watermark comparison result is consistent, normally releasing the IRP request, or else sending a request of recovering a tampered webpage file to a user layer and refusing the IRP request. The webpage tamper-resistant method can be used for effectively protecting a Web website from being tampered and improving the watermark comparison efficiency.

Description

technical field [0001] The invention relates to the technical field of Web site security protection, in particular to a webpage tamper-proof method based on file-driven watermark comparison. Background technique [0002] With the rapid development of the Internet, the website as an information carrier has become an important way for enterprises and institutions to release information. However, more and more hackers use the loopholes of the website to illegally tamper with the information on the website. impact and serious economic losses. In response to this threat of network tampering, many software providers have developed various anti-tampering systems for web pages. [0003] At present, there are three related technologies of the anti-tampering system for static web pages: [0004] 1. Plug-in polling technology. The technical solution works independently and has nothing to do with the operating system, web container, etc., and is implemented by polling and monitoring ...

AI Technical Summary

Problems solved by technology

The main disadvantages of this technology are: (1) It has a certain impact on server access performance and resource occupation

(3) An independent publisher needs to be added during deployment

(4) Cannot prevent attacks on the database through the Web

This technology is based on the development of the driver in the kernel, and can promptly alarm and intercept captured tampering behaviors, but there are also some inherent defects: (1) There are many known methods to bypass file system-based inspections

(2) The implementation method is too dependent on the characteristics of the operating system, and some technologies use undocumented technology, which is unstable and non-upgradable

(3) The timing of the inspection is single, and once the capture is missed, there is no protective means

(4) Cannot prevent attacks on the database through the Web

Images