Word vector webpage intrusion detection method based on semantic analysis

Abstract

The invention provides a word vector webpage intrusion detection method based on semantic analysis, which relates to the field of webpage attack detection, and comprises the following steps: 1) crawling webpage source codes corresponding to URLs of websites, screening and classifying the webpage source codes and taking the webpage source codes as a training set; 2) extracting Chinese character strings of all webpage source codes in the training set to perform word segmentation processing; 3) respectively carrying out keyword screening on word segmentation processing results and constructing akeyword library; 4) constructing a word vector of the keyword, and performing normalization processing; 5) calculating the weight in combination with the normalized TF-IDF to establish a weight word vector space, 6) training a webpage intrusion detection model, 7) judging whether the webpage to be detected is invaded or not through the model. The invention provides a webpage intrusion detection method for judging whether a webpage is maliciously invaded by vocabularies by utilizing a model.

Description

technical field [0001] The invention relates to the field of web page attack detection, in particular to a word vector web page intrusion detection method based on semantic analysis. Background technique [0002] With the rapid development of the Internet, network security has gradually become a potentially huge problem. Network security is a wide-ranging issue, which also involves the question of whether it constitutes a criminal act. In its simplest form, it is primarily concerned with whether the content of a website has been tampered with. Therefore, the demand for website attack detection is getting higher and higher in daily life. [0003] Currently, common website attack methods include sql injection, xss attack, and csrf attack. Sql injection refers to the code that users inject malicious sql commands into http requests, causing the server to execute malicious sql commands together when using database sql commands. XSS attack, cross-site scripting attack refers t...

AI Technical Summary

Problems solved by technology

Pattern matching technology uses feature codes to detect malware, but cannot identify abnormal codes from the semantic level; heuristic rules refer to a certain characteristic of autonomous insight or a method of identifying input data through a specific technology. If any one of the rules appears in the detected code, the detected code may be judged as malicious code

Images