Mobile internet traffic anti-hijacking method and system

Abstract

The invention discloses a mobile internet traffic anti-hijacking method and system, and the method comprises the following steps: loading a monitoring script on a mobile terminal page, wherein the monitoring script is used for monitoring a dom label of the mobile terminal page, and the monitoring script obtains a dom label of the page script of the mobile terminal; pre-establishing a domain name white list; obtaining the address of the dom tag, judging whether the address of the dom tag is in the domain name white list or not, and if not, executing script operation corresponding to the dom tag. According to the method and the system, on the basis of recording and reporting of front-end code hijacking, whether the illegal dom tag exists in the current page or not is intelligently detected by introducing the monitoring script, the illegal hijacking flow is identified according to the detected illegal dom tag, the compatibility is better, and the efficiency is higher. when the illegal dom tag is found each time, the deletion operation of the script corresponding to the illegal dom tag is executed, and the monitoring and execution log is generated and reported, so that the mobile browser page can be effectively monitored.

Description

technical field

[0001] The invention relates to the technical field of Internet traffic monitoring, in particular to a mobile Internet traffic anti-hijacking method and system. Background technique

[0002] At present, in the era of mobile Internet, traffic hijacking is very common, such as hosts hijacking, process hooking, startup hijacking, LSP injection, browser plug-in hijacking, HTTP proxy filtering, kernel data packet hijacking, etc., which have a great impact on traffic propagation. CSP mainly adds whitelist domain names in the nginx configuration file. However, the existing technologies mainly have no logging, low compatibility, and inability to effectively prevent session layer hijacking. Contents of the invention

[0003] One of the purposes of the present invention is to provide a method and system for preventing hijacking of mobile Internet traffic. The method and system are based on the recording and reporting of front-end code hijacking, and intelligently de...

Images