Page detection method and device
A detection method and page technology, applied in computer security devices, instruments, electrical digital data processing, etc., can solve problems such as user information leakage, poor network security, etc., to improve security, improve accuracy, and eliminate confusion or deformation. Effect
Active Publication Date: 2020-02-14
NEW H3C SECURITY TECH CO LTD
View PDF7 Cites 2 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
For example, illegal users implant malicious JS codes (hereinafter referred to as malicious codes) in HTML pages for browser vulnerabilities. When legitimate users access HTML pages carrying malicious codes through unpatched browsers, the malicious codes will be triggered. , resulting in leakage of user information and poor network security
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0068] The following will clearly and completely describe the technical solutions in the embodiments of the application with reference to the drawings in the embodiments of the application. Apparently, the described embodiments are only some of the embodiments of the application, not all of them. Based on the embodiments in this application, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the scope of protection of this application.
[0069] At present, page detection is mainly performed by defining character rules. Specifically, match the JS code of the page to be detected with the defined malicious code fragment. If the JS code of the page to be detected matches the defined malicious code fragment, that is, the JS code of the page to be detected includes a code fragment matching the defined malicious code fragment, then it is determined that the page to be detected is a page implanted with malicious code. The ...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention provides a page detection method and device. According to the scheme, the method comprises the steps of obtaining script language codes of a to-be-detected page; dividing the script language codes into a plurality of lexical fragments, and determining a fragment type corresponding to each lexical fragment; combining the fragment types corresponding to the lexical fragments accordingto the position of each lexical fragment in the script language codes to obtain a target Token stream; performing expression simplification on lexical fragments corresponding to fragment types in thetarget Token stream to obtain simplified codes corresponding to script language codes; and inputting the simplified code into a preset safety engine, and detecting whether the to-be-detected page is amalicious page or not. By applying the technical scheme provided by the embodiment of the invention, the accuracy of malicious codes is improved, the probability of user information leakage is reduced, and the network safety is improved.
Description
technical field [0001] The present application relates to the technical field of security protection, in particular to a page detection method and device. Background technique [0002] Javascript (abbreviation: JS) is a literal scripting language. JS is widely used in hypertext markup language (English: Hyper Text Markup Language, abbreviated: HTML) pages, so as to add dynamic functions to HTML pages displayed by browsers. [0003] Currently, illegal users can use browser vulnerabilities to hang horses on web pages. For example, illegal users implant malicious JS codes (hereinafter referred to as malicious codes) in HTML pages for browser vulnerabilities. When legitimate users access HTML pages carrying malicious codes through unpatched browsers, the malicious codes will be triggered. , resulting in leakage of user information and poor network security. Contents of the invention [0004] In view of this, the purpose of the present application is to provide a page detect...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Applications(China)
IPC IPC(8): G06F21/56
CPCG06F21/563
Inventor 马文强
Owner NEW H3C SECURITY TECH CO LTD