Security defense method and device for multi-platform account

Abstract

The embodiment of the invention discloses a security defense method and device for a multi-platform account, and the method comprises the steps: obtaining a first user identifier of a first platform and a second user identifier of a second platform if it is judged that the current account is switched to the second platform from the first platform; if it is judged that the first user identifier isthe same as the second user identifier and the login authentication identifier of the first platform is not null, allowing the current account to switch and log in to the second platform; and if it isjudged that the first user identifier is different from the second user identifier or the login authentication identifier of the first platform is empty, refusing the current account to switch to login to the second platform. Whether the two platforms share the same multi-platform account or not is determined by judging the user identifiers of the first platform and the second platform; whether the first platform logs in through a normal login interface or not is determined by judging whether the login authentication identifier of the first platform is empty or not, so that leakage of a multi-platform account of the XSS is prevented, and security defense is better carried out on each website.

Description

technical field [0001] The embodiments of the present invention relate to the technical field of network security, and in particular to a security defense method and device for multi-platform accounts. Background technique [0002] With the popularity and development of the Internet, everyone needs to leave their own account credentials on the Internet to easily manage their own information, financial and other assets. And one of the most important parts of every company's product must be the account system. At the same time, accounts have gradually become very valuable, and cyber hackers are profitable, so they use various techniques to try to break into the account system to obtain benefits. The country also regards Internet security as the top priority of Internet development. [0003] Common account theft and attack methods include: XSS (Cross Site Scripting, cross-site scripting attack), SQL (Structured Query Language, Structured Query Language) injection attack, cred...

AI Technical Summary

Problems solved by technology

[0004] In the existing Internet environment, many websites cannot identify the leakage of multi-platform accounts well, resulting in the failure of XSS security defense

Images