Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Webpage backdoor detecting method and device

A webpage backdoor and webpage technology, applied in the field of network security, can solve problems such as low detection efficiency, achieve the effect of reducing the number and improving web detection performance

Active Publication Date: 2018-06-26
HUAWEI TECH CO LTD
View PDF8 Cites 13 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] The embodiment of the present application provides a method for detecting webpage backdoors to alleviate the problem of low detection efficiency in the prior art

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Webpage backdoor detecting method and device
  • Webpage backdoor detecting method and device
  • Webpage backdoor detecting method and device

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0067] A series of interactive packets between the browser and the website server generated by the terminal using the browser to access the webpage is called web traffic. With the explosive growth of information in the network, on the one hand, web servers often store millions of webpage files, and on the other hand, end users frequently access webpages, resulting in a rapid increase in web traffic. Existing security devices such as firewalls and deep packet inspection (English: Deep Packet Inspection, DPI) are constrained by performance, and it is difficult to detect all web page data carried by the received web traffic one by one. There is one of the difficulties of web security technology.

[0068] One of the main reasons why the existing web detection performance is not high is that the number of web pages to be detected is huge, for which the embodiment of the present application provides a method for detecting web page backdoors. Based on the web traffic of the protecte...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a webpage backdoor detecting method and device, and aims at solving the problem of low detection efficiency in the prior art. The method comprises that a first web flow of a protected host is obtained; a webpage access record of the protected host is generated according to the first web flow, and used to store at least one URL, IP addresses accessing each URL, and the totalaccess frequency of each URL, and each URL identifies one webpage provided by the protected host; according to the webpage access record, a suspected URL is determined from the at least one URL, thetotal access frequency of the suspected URL is lower than a first threshold, and the ratio of number of different IP addresses which access the suspected URL to the total access number of the suspected URL is lower than a second threshold; and whether the webpage identified by the suspected URL includes a backdoor characteristic is determined, and the webpage identified by the suspected URL includes a webpage backdoor is determined according to a backdoor characteristic determining result.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method for detecting a webpage backdoor and a device for detecting a webpage backdoor. Background technique [0002] A webpage backdoor (webshell) is a backdoor tool that exists in the form of a webpage file. The operation authority of the website can be obtained through the webshell, such as uploading and downloading files, viewing the database, executing script commands, etc. The webshell file can be a webpage file written by a dynamic server page (English: Active Server Page, ASP) application, or a webpage file written by a hypertext preprocessor (English: Hypertext Preprocessor, PHP) language, or a common gateway interface (English: : Common Gateway Interface, CGI) program file. [0003] Hosts that provide webpage services and open webpage service-related ports in the network are also referred to as website servers or web servers. Web servers are often targeted ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): H04L29/06H04L29/08
CPCH04L63/1416H04L63/1425H04L63/1441H04L67/02H04L63/0236H04L63/1483H04L63/20H04L69/22
Inventor 蒋武
Owner HUAWEI TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com