Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Proxy detection method, device, equipment and medium based on domain name pan-analysis

A detection method and pan-analysis technology, applied in the Internet field, can solve problems such as high delay, high time and labor costs, and interference of detection results

Active Publication Date: 2020-07-07
HANGZHOU FRAUDMETRIX TECH CO LTD
View PDF5 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, these proxy detection methods have the problems of forged detection results, high delay, and low accuracy to varying degrees. For example, it takes more than a few minutes to scan the port opening status of the source IP of the access request. Too many cases are related to network delay problems, so it is impossible to judge the access method in real time, the timeliness is poor, and it has high time and labor costs
When detecting the information in the request header, the information in the request header is easy to be forged, which interferes with the detection results, and there is a very high false positive rate, resulting in low authenticity of the detection results

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Proxy detection method, device, equipment and medium based on domain name pan-analysis
  • Proxy detection method, device, equipment and medium based on domain name pan-analysis
  • Proxy detection method, device, equipment and medium based on domain name pan-analysis

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0030] This embodiment provides a proxy detection method based on domain name pan-analysis, based on the principle that proxy access does not perform local DNS resolution, but performs DNS resolution on the proxy server, and judges the access request according to whether DNS local resolution is performed in the front-end access Whether a proxy is used. When not using a proxy for resource access, the DNS local resolution takes a non-zero long long number of milliseconds, and when using a proxy for resource access, the DNS local resolution time is always equal to 0, because the proxy is used for When accessing, the relevant domain name information is encapsulated in proxy traffic and sent to the proxy client, DNS resolution is performed at the remote end, and DNS resolution is not performed locally, so the time-consuming local DNS resolution can determine whether the access request is a proxy access.

[0031] However, when the time-consuming of DNS local resolution is equal to 0...

Embodiment 2

[0055] This embodiment discloses a device corresponding to the proxy detection method based on domain name universal analysis in Embodiment 1, which is a virtual structure device. In this embodiment, as figure 2 shown, including:

[0056] The request receiving module 210 is configured to receive an access request, and the access request includes a pan-analyzed random domain name;

[0057] DNS resolution time-consuming collection module 220, used to collect the DNS local resolution time of the random domain name through the front end;

[0058] The judging module 230 is configured to judge the difference of the DNS local resolution time. If the difference is equal to 0, the access request is a proxy access.

[0059] The above-mentioned DNS resolution time-consuming collection module 220 obtains the time point when the DNS local resolution starts by calling the front-end PerformanceTiming.domainLookupStart interface, that is, obtains the query start time; by calling the Perform...

Embodiment 3

[0061] image 3 A schematic structural diagram of an electronic device provided by Embodiment 3 of the present invention, such as image 3 As shown, the electronic device includes a processor 310, a memory 320, an input device 330, and an output device 340; the number of processors 310 in a computer device may be one or more, image 3 Take a processor 310 as an example; the processor 310, memory 320, input device 330 and output device 340 in the electronic device can be connected by bus or other methods, image 3 Take connection via bus as an example.

[0062] The memory 320, as a computer-readable storage medium, can be used to store software programs, computer-executable programs, and modules, such as program instructions / modules corresponding to the proxy detection method based on domain name pan resolution in the embodiment of the present invention (for example, domain name-based The request receiving module 210, the DNS resolution time-consuming acquisition module 220 a...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a proxy detection method based on domain name pan-analysis, relates to the field of Internet technology, and aims to collect the DNS local resolution time of a pan-domain name through the front end to determine whether the access request for the pan-domain name is a proxy access, shortening the proxy time. The judgment time of the detection is improved and the judgment accuracy is improved. The method includes the following steps: receiving an access request, the access request is initiated to a random domain name after pan-analysis; collecting the DNS local resolution time of the random domain name through the front end; determining the difference between the DNS resolution time, if the If the DNS difference is equal to 0, the access request is proxy access. The invention also discloses a proxy detection device, electronic equipment and computer storage medium based on the pan-analysis of the domain name.

Description

technical field [0001] The present invention relates to the technical field of the Internet, in particular to a proxy detection method, device, equipment and medium based on domain name pan resolution. Background technique [0002] In Internet access, a large number of accesses are performed by using a proxy server. A proxy server is a server that sits between a client application (such as an Internet web browser) and an actual Internet content server. It intercepts all requests to the real server to see if it can fulfill them itself. If not, it forwards the request to the real server. [0003] At present, the commonly used proxy detection methods mainly include the following: proxy detection by detecting whether the source IP is open to port 80 or 8080 through reverse detection technology, and proxy detection by detecting the X-Forward-For information in the HTTP header information of the access source Detection, proxy detection by detecting Keep-alive message informatio...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): H04L29/12H04L29/08H04L12/26
CPCH04L43/08H04L61/4511H04L67/56
Inventor 焦小齐李克勤
Owner HANGZHOU FRAUDMETRIX TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products