Static feature based web page malicious scenarios detection method

Abstract

This invention relates to computer safety field, which uses ill script statistical property to rapidly find out ill script. The principle of this invention uses ill page codes through process and the processed normal characters and abnormal characters have apparent difference and uses page character statistical property to test ill script.

Description

Technical field [0001] The patent of the present invention belongs to the field of computer security, and mainly uses the statistical features in malicious scripts to quickly and accurately detect whether a web page contains malicious scripts, so as to realize rapid detection of harmful web pages in the network, and prevent the running of malicious scripts in advance, so as to facilitate the Internet access. Users are provided with a secure network environment. Background technique [0002] Computer viruses, Trojans, spyware and malicious codes are the most important security threats to computer networks in recent years. In addition to spam emails, there is another important way in the transmission of computer viruses, Trojans, spyware and malicious codes, which is to use specially constructed web pages to spread viruses and Trojans to the computers of users who visit the web pages. Such web pages mainly use various vulnerabilities in operating systems, browsers, plug-ins, ...

AI Technical Summary

Problems solved by technology

[0007] The traditional antivirus technology mainly relies on signature matching to detect viruses, Trojan horses, and malicious webpages. This method is very effective for virus programs with fixed and unchanging characteristics, but has no effect on webpage scripts that have been encrypted and inserted into interference processing. , it is powerless to detect newly released webpage scripts exploiting vulnerabilities and newly released viruses and Trojan horse programs

Images