Method and device for checking malicious extension of browser and computer equipment

Abstract

The embodiment of the invention provides a method and device for checking malicious extension of a browser and computer equipment. The method comprises the steps: receiving a key acquisition request sent by a terminal through the browser; generating a first key according to the key acquisition request, and returning the first key to the terminal; receiving a first message authentication code and afirst change record sent by the terminal, wherein the first change record comprises DOM change triggering information corresponding to a first change; executing a change operation corresponding to the DOM change triggering information on a reference DOM tree to obtain a second DOM tree change sequence; calculating the first key and the second DOM tree change sequence by a predetermined algorithmto obtain a second message authentication code; determining whether the calculated second message authentication code is the same as the first message authentication code or not; and if so, determining that the page structure of the browser is not damaged by browser extension. According to the method, the malicious extension behavior of the browser can be reliably detected.

Description

technical field [0001] The invention relates to the field of rack operation and maintenance, in particular to a method, device and computer equipment for checking malicious browser extensions. Background technique [0002] Browsers allow users to interact with various communication networks (such as the Internet) in order to view websites, access computer files in various formats, manage network applications, etc.; in order to extend the functional capabilities of web browsers, many web browsers allow extensions, browsing Browser extensions are usually developed by independent developers / development teams, released to various browser application stores, and run in the closed environment provided by the browser after being reviewed by the browser manufacturer. The extension is an enhanced function of the browser, and generally the API (Application Program Interface, application program) interface authority provided by the browser is higher than the operability of the browser ...

AI Technical Summary

Problems solved by technology

Therefore, in order to prevent malicious extensions, existing technologies often prevent them by strengthening the review mechanism of browser extensions; due to the imperfect review system and the scheming of malicious extension developers, it is inevitable that some malicious extensions will pass the review of browser manufacturers , released to the app store, and installed by users in their respective browsers, which caused light or heavy interference to users, and brought direct economic losses to users by changing the HTML page structure (such as illegally obtaining personal data, bank account information, etc.)

Images