A method and system for identifying Trojan horses on webpages

Abstract

The invention discloses a method and a system for identifying a webpage hanging horse. The method comprises: obtaining the URL of the website to be detected; and pushing the URL to be detected to a virtual machine sandbox; a hanging horse detection and verification system is installed in the sandbox; using a simulated browser in the hanging horse detection and verification system to detect the URL Simulate the access, and analyze the received response content; judge whether there is the same or similar content as the first setting label in the analyzed response content; wherein, the first setting label is a preset keyword; if it exists, Then issue a warning; determine that the content of the response content after parsing is more relevant than the preset value with the second setting tag, and record it as suspicious response content; wherein, the second setting tag includes the tag of hanging horse; in the sandbox, the simulated The browser executes suspicious response content; matches the execution result with the preset verification rules used to detect trolling behavior, and issues a warning if the match is successful. The invention has the advantage of high identification efficiency of hanging horses.

Description

technical field [0001] The invention relates to the technical field of network security, and in particular, to a method and system for identifying a horse on a webpage. Background technique [0002] With the development of Internet technology and the use of the Internet more and more, in order to improve user browsing security, quickly detect web pages that are hung up, give users a timely warning, and reduce users' economic or other losses due to web page hanging. However, the traditional web page hanging horse verification mostly relies on manual analysis, and the detection efficiency is low. Therefore, there is an urgent need for a web page hanging horse identification method with high detection efficiency. SUMMARY OF THE INVENTION [0003] The purpose of the present invention is to provide a method and system for identifying horses on web pages with high detection efficiency. [0004] For achieving the above object, the present invention provides the following scheme:...

AI Technical Summary

Problems solved by technology

However, the traditional webpage Trojan verification is mostly based on manual analysis, and the detection efficiency is low. Therefore, there is an urgent need for a webpage Trojan identification method with high detection efficiency.

Images