Webpage tampering detection method and device

Abstract

The embodiment of the invention provides a webpage tampering detection method and device for improving the webpage tampering detection accuracy and efficiency. The method comprises the steps of obtaining a target malicious word of a text to which a to-be-detected station belongs; retrieving whether the text to which the to-be-detected station belongs is the target malicious word exists or not; if the target malicious word exists, constructing a word frequency vector of the context where the target malicious word is located; inputting the word frequency vector of the context into a preset classifier model to judge whether the context is tampered or not, wherein the classifier model is an original classifier model which is generated according experiment text training.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method and device for detecting webpage tampering. Background technique [0002] Web page tampering means that attackers modify part or all of existing web pages to malicious content or create new web pages on the site and write malicious content. Web page tampering not only affects the normal operation of the website, but also disseminates a large amount of illegal information to the public, causing great harm. [0003] At present, the detection methods of webpage tampering mainly include blacklist keyword detection and webpage digital fingerprint comparison. Blacklist keyword detection determines whether a webpage has been tampered with by checking whether the webpage contains keywords in the blacklist or whitelist. This method may cause false negatives or false positives due to the insufficient comprehensiveness of the keywords contained in the blacklist or whiteli...

AI Technical Summary

Problems solved by technology

This method may cause false negatives or false positives due to the insufficient comprehensiveness of the keywords contained in the blacklist or whitelist. report

[0004] Webpage digital fingerprint comparison, this detection method needs to pre-establish the digital fingerpr

Images