Webpage source code three-layer encryption method

Abstract

The invention discloses a webpage source code three-layer encryption method, and the method mainly comprises the steps of calculating an abstract value of an original key data, and removing several characters in the original key data to get a first key data; rewriting a first layer key data to get a second key data; replacing meaningful word fragments with meaningless placeholder characters by Regular Expressions; transmitting a third layer data to a browser; transiting the third layer data into the second layer data through a transition corresponding relation by the Regular Expressions after the browser receives the third layer data; analyzing the second key data in the second layer data to the first layer key data by the self-carried Javascript engine; and obtaining an original key data by exhausting an abstract value and the first key data through a first code. According to the invention, an efficient and flexible confusion strategy, a dynamically generated minimized character set and a forced exhausting are utilized, so that the difficulty for analyzing and cracking webpage source code by an attacker is greatly increased under the prerequisite that a visitor feels nothing normally.

Description

technical field [0001] The invention relates to the field of webpage encryption in the network, in particular to a three-layer encryption method for webpage source codes. Background technique [0002] Web page code refers to some special "languages" that need to be used in the process of making web pages. Designers organize and arrange these "languages" to create web pages, and then the browser "translates" the code before it can be viewed in the end. to the effect. Usually, the technology used to protect the source code is to use some software to rewrite the source code into a form that is not easy for real people to read in a certain way without changing the execution result, so as to increase the attacker's ability to analyze the code. Difficulty, to achieve the effect of protecting the source code. [0003] The source code of the web page must be executed by the browser of the visitor. The page code of a website can be easily obtained and analyzed by malicious attacker...

AI Technical Summary

Problems solved by technology

[0003] The source code of the webpage must be executed by the browser of the visitor. The page code of a website can be easily obtained and analyzed by malicious attackers, and then a program that can automatically attack the website will be generated, which poses a great threat to the normal visit of the website.

Because the method is single and the algorithm is usually not updated for a long time, the defense effect is very limited when encountering targeted attacks

Images