A method, device, equipment and storage medium for detecting abnormal dark links on a website

Abstract

The present application discloses a method for detecting abnormal dark links on a website, including: obtaining the current source code of the website to be detected; respectively determining whether the current web page structure and current web page content of the current source code are the same as the historical web page structure and historical web page content of the historical source code obtained during the last detection; if not, determining the abnormal dark links in the website to be detected based on the current web page content. It can be seen that the present method screens out the current source code that has changed compared to the historical source code through the web page structure and web page content, and only needs to detect abnormal dark links for the current web page content corresponding to the changed current source code, so it can greatly reduce the number of operations required for abnormal dark link detection, reduce the time required, and thus improve the efficiency of detecting abnormal dark links on the website. The present application also discloses a detection device, equipment and computer-readable storage medium for abnormal dark links on a website, all of which have the above-mentioned beneficial effects.

Description

Technical Field

[0001] The present invention relates to the field of dark link detection, and in particular to a method, device, equipment and computer-readable storage medium for detecting abnormal dark links on a website. Background Art

[0002] "Dark links" are just as their name describes, they are invisible or easily overlooked hyperlinks on web pages. The purpose of setting dark links is to avoid damaging the original structure of web pages as much as possible. However, after a website is attacked, abnormal dark links may be inserted into the website, which will cause abnormal situations such as data loss and leakage, thus bringing negative impact to the website.

[0003] In the prior art, the current source code of the website to be detected is directly detected and judged to determine whether there are abnormal dark links in the website to be detected. However, since the amount of data in the current source code of the website to be detected is large, the operations required for each detection and judgment process are cumbersome and complicated, and a lot of time is consumed, which makes the efficiency of detecting abnormal dark links on the website low.

[0004] Therefore, how to improve the efficiency of detecting abnormal dark links on websites is a technical problem that technicians in this field currently need to solve. Summary of the invention

[0005] In view of this, an object of the present invention is to provide a method for detecting abnormal dark links on a website, which can improve the efficiency of detecting abnormal dark links on a website; another object of the present invention is to provide a device, equipment and computer-readable storage medium for detecting abnormal dark links on a website, all of which have the above-mentioned beneficial effects.

[0006] In order to solve the above technical problems, the present invention provides a method for detecting abnormal dark links on a website, comprising:

[0007] Get the current source code of the website to be tested;

[0008] respectively determining whether the current webpage structure and current webpage content of the current source code are the same as the historical webpage structure and historical webpage content of the historical source code obtained during the last detection;

[0009] If not, the abnormal dark links in the website to be detected are determined according to the current web page content.

[0010] Preferably, before determining the abnormal dark link in the website to be detected according to the current webpage content, the method further includes:

[0011] Setting corresponding screening rules according to the characteristics of the abnormal dark link;

[0012] The abnormal dark links in the website to be detected are screened out using the screening rules.

[0013] Preferably, before determining the abnormal dark link in the website to be detected according to the current webpage content, the method further includes:

[0014] Filter out the first target URL preset in the whitelist in the current webpage content;

[0015] Each URL in the current webpage content except the first target URL is detected to determine the abnormal dark link.

[0016] Preferably, before determining the abnormal dark link in the website to be detected according to the current webpage content, the method further includes:

[0017] Determine a second target URL in the current webpage content whose domain name registration time has expired;

[0018] Determine whether the second target URL is from an illegal user;

[0019] If so, the second target URL is determined to be the abnormal dark link.

[0020] Preferably, the process of respectively determining whether the current webpage structure and current webpage content of the current source code are the same as the historical webpage structure and historical webpage content of the historical source code acquired during the last detection further includes:

[0021] Determine whether there are preset sensitive words in the current webpage content;

[0022] If so, the abnormal dark link is determined according to the preset sensitive words existing in the current web page content.

[0023] Preferably, before determining the abnormal dark link in the website to be detected according to the current webpage content, the method further includes:

[0024] Invalid hidden links and / or hidden links belonging to the domain in the website to be detected are filtered out.

[0025] Preferably, after determining the abnormal dark link in the website to be detected according to the current webpage content, the method further includes:

[0026] The determined abnormal dark link is output.

[0027] In order to solve the above technical problems, the present invention also provides a device for detecting abnormal dark links on a website, comprising:

[0028] The acquisition module is used to obtain the current source code of the website to be detected;

[0029] A first determination module is used to determine whether the current webpage structure and current webpage content of the current source code are the same as the historical webpage structure and historical webpage content of the historical source code obtained during the last detection; if not, the first detection module is executed;

[0030] The first detection module is used to determine abnormal dark links in the website to be detected based on the current web page content.

[0031] In order to solve the above technical problems, the present invention also provides a device for detecting abnormal dark links on a website, comprising:

[0032] Memory for storing computer programs;

[0033] A processor is used to implement the steps of any of the above-mentioned methods for detecting abnormal dark links on websites when executing the computer program.

[0034] In order to solve the above technical problems, the present invention also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of any of the above-mentioned methods for detecting abnormal dark links on websites are implemented.

[0035] The present invention provides a method for detecting abnormal dark links on a website, which obtains the current source code of the website to be detected; and respectively determines whether the current web page structure and current web page content of the current source code are the same as the historical web page structure and historical web page content of the historical source code obtained during the last detection; if not, the abnormal dark links in the website to be detected are determined according to the current web page content. It can be seen that the method screens out the current source code that has changed compared to the historical source code through the web page structure and web page content, and only needs to detect abnormal dark links for the current web page content corresponding to the changed current source code, so it can greatly reduce the number of operations required for abnormal dark link detection and reduce the time required, thereby improving the efficiency of detecting abnormal dark links on the website.

[0036] In order to solve the above technical problems, the present invention also provides a detection device, equipment and computer-readable storage medium for abnormal dark links on websites, all of which have the above beneficial effects. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the embodiments of the present invention or the technical solutions of the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying any creative work.

[0038] Figure 1A flowchart of a method for detecting abnormal dark links on a website provided by an embodiment of the present invention;

[0039] Figure 2 A structural diagram of a device for detecting abnormal dark links on a website provided by an embodiment of the present invention;

[0040] Figure 3 A structural diagram of a device for detecting abnormal dark links on a website provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0041] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0042] The core of an embodiment of the present invention is to provide a method for detecting abnormal dark links on a website, which can improve the efficiency of detecting abnormal dark links on a website; another core of the present invention is to provide a device, equipment and computer-readable storage medium for detecting abnormal dark links on a website, all of which have the above-mentioned beneficial effects.

[0043] In order to enable those skilled in the art to better understand the scheme of the present invention, the present invention is further described in detail below in conjunction with the accompanying drawings and specific implementation methods.

[0044] Figure 1 The present invention provides a flowchart of a method for detecting abnormal dark links on a website. Figure 1 As shown, a method for detecting abnormal dark links of a website includes:

[0045] S10: Obtain the current source code of the website to be detected.

[0046] In this embodiment, the current source code of the website to be detected needs to be obtained first. The current source code of the website to be detected can be obtained through a browser or through a preset collection tool, which is not limited in this embodiment.

[0047] S20: respectively determining whether the current webpage structure and current webpage content of the current source code are the same as the historical webpage structure and historical webpage content of the historical source code obtained during the last detection;

[0048] S30: If not, determine the abnormal dark links in the website to be detected according to the current web page content.

[0049] After obtaining the current source code of the website to be detected, further obtain the historical web page structure corresponding to the historical source code during the last detection, and then compare whether the current web page structure is the same as the historical web page structure; if the web page structure of the current source code is inconsistent with the web page structure of the historical source code, it means that the current web page source code has changed compared with the historical source code during the last detection, so it is necessary to determine the abnormal dark links in the website to be detected based on the current web page content; if they are consistent, it is necessary to further determine whether the current web page content of the current source code is the same as the historical web page content of the historical source code; if they are different, it means that the current source code has changed compared with the historical source code during the last detection, so it is necessary to perform abnormal dark link detection on the current web page content.

[0050] It should be noted that the process of obtaining the current webpage structure corresponding to the current source code includes: extracting the structure of the obtained current source code, obtaining the structure of the website to be detected according to the HTML tags of the website, and obtaining the current webpage structure; wherein the HTML tags include: 、 、、 <css> 、 <style>、、、等；网页结构即利用HTML的标签顺序组成的结构。

[0051] 需要说明的是，判断当前源代码的当前网页内容与历史源代码的历史网页内容是否相同的过程，具体包括：首先根据当前源代码提取出待检测网站的网站结构序列；网站结构序列即HTML的标签所对应的网页内容；然后对各网站结构序列进行分词，得到有效的特征向量，并按照预设规则为每一个特征向量设置对应的权重等级，各个级别的权重分别表示各个分词在整条网站结构序列中的重要程度，级别越高代表的该分词越重要，具体可以是为每一个特征向量设置1-5等级别的权重。再计算出各网站结构序列对应的当前哈希值，具体可以通过hash函数计算各个特征向量的哈希值，哈希值为二进制数组成的01二进制码，并给所有特征向量进行加权，即W＝hash*weight，在加权计算的过程中遇到1，则hash值和权值正相乘；遇到0，则hash值和权值负相乘；再对各个特征向量的加权结果进行累加，让各个特征向量变成只有一个序列串，对于二进制签名的累加结果，如果大于0，则置为1，否则置为0，从而得到该网站结构序列的hash值，即得出与各网站结构序列对应的当前哈希值。在得出当前网页内容中各网站结构序列对应的当前哈希值后，判断当前哈希值和历史源代码的历史网页内容对应的历史哈希值的汉明距离是否大于预设阈值；若是，则表示当前网页内容与历史网页内容不相同；预设阈值根据经验确定，本实施例对此不做限定。假设预设阈值为3，如果汉明距离在3以内，则表明该待检测网站和上一次检测时相比，不存在网页内容的变化，因此不需要对该待检测网站再进行异常暗链的检测，当前的异常暗链的检测结果与上一次异常暗链的检测结果相同；如果汉明距离在3以外，则表明该待检测网站的网页内容发生变化，则需要再次对待检测网站进行异常暗链的检测。

[0052] 具体的，在实际操作中，一般通过浏览器渲染检测暗链的方式来确定出待检测网站中的异常暗链，需要说明的是，浏览器渲染检测暗链的方式为本领域技术人员的公知常识，此处不做赘述。由于浏览器渲染检测暗链的方式比较消耗时间，因此本实施例是在这一步骤之前先对待检测网站的网页结构和网页内容的变化情况进行判断。

[0053] 本发明实施例提供的一种网站异常暗链的检测方法，通过获取待检测网站的当前源代码；并分别判断当前源代码的当前网页结构和当前网页内容与上一次检测时获取的历史源代码的历史网页结构和历史网页内容是否相同；若否，则根据当前网页内容确定出待检测网站中的异常暗链。可见，本方法通过网页结构和网页内容筛选出相较于历史源代码发生变化的当前源代码，仅需要针对发生变化的当前源代码对应的当前网页内容进行异常暗链的检测，因此能大大减少需要进行异常暗链检测的操作次数，减少所需消耗的时间，从而提高检测网站异常暗链的效率。

[0054] 在上述实施例的基础上，本实施例对技术方案作了进一步的说明和优化，具体的，本实施例中，在根据当前网页内容确定出待检测网站中的异常暗链之前，进一步包括：

[0055] 根据异常暗链的特征设置对应的筛选规则；

[0056] 利用筛选规则筛选出待检测网站中的异常暗链。

[0057] 具体的，在本实施例中，是在根据当前网页内容确定出待检测网站中的异常暗链之前，先获取异常暗链的特征，然后根据异常暗链的特征设置对应的筛选规则；在设置出对应的筛选规则之后，再利用确定出的筛选规则对待检测网站中的当前网页内容进行筛选，确定出待检测网站中的异常暗链。其中，异常暗链的特征包括标签的隐藏特征、位置隐藏特征、颜色特征、相对位置隐藏特征以及边界隐藏特征等，本实施例对异常暗链的特征的类型不做限定，在实际操作中根据实际需求进行选择确定即可。

[0058] 可见，本实施例通过直接根据异常暗链的特征确定出的筛选规则预先筛选待检测网站中的异常暗链，筛选操作更加便捷，能够进一步提高确定出待检测网站中的异常暗链的效率。

[0059] 在上述实施例的基础上，本实施例对技术方案作了进一步的说明和优化，具体的，本实施例中，在根据当前网页内容确定出待检测网站中的异常暗链之前，进一步包括：

[0060] 筛选出当前网页内容中预设于白名单中的第一目标URL；

[0061] 对当前网页内容中除了第一目标URL之外的各URL进行检测，确定出异常暗链。

[0062] 具体的，在本实施例中，是在根据当前网页内容确定出待检测网站中的异常暗链之前，预先设置白名单，并在白名单中设置已确定为正常暗链的URL；然后依据预设的白名单对当前网页内容进行比较，确定出当前网页内容中预设于白名单中的第一目标URL，然后将当前网页内容中的第一目标URL排除，即筛选出当前网页内容中预设于白名单中的第一目标URL；再对当前网页内容中除了第一目标URL之外的各URL进行检测，确定出异常暗链。需要说明的是，白名单中的URL可以是根据实际操作经验累积设置，也可以是根据公信力较强、权威性较高的网站链接设置，本实施例对此不做限定。

[0063] 可见，在本实施例中，是在根据当前网页内容确定出待检测网站中的异常暗链之前，进一步通过预设白名单的方式排除当前网页内容中的正常暗链，再对剩余的当前网页内容进行异常暗链的检测，能够进一步提高检测异常暗链的效率。

[0064] 在上述实施例的基础上，本实施例对技术方案作了进一步的说明和优化，具体的，本实施例中，在根据当前网页内容确定出待检测网站中的异常暗链之前，进一步包括：

[0065] 确定出当前网页内容中域名注册时间过期的第二目标URL；

[0066] 判断第二目标URL是否为非法用户；

[0067] 若是，则确定第二目标URL为异常暗链。

[0068] 本实施例针对的是待检测网站引用的友情链接，友情链接的域名注册时间到期后，可能被其他非法用户抢注，用于非法活动。具体的，在本实施例中，在根据当前网页内容确定出待检测网站中的异常暗链之前，首先获取当前网页内容中各URL以及各URL对应的域名注册时间，然后判断各URL的域名注册时间是否过期，并确定出域名注册时间过期的第二目标URL；再判断第二目标URL是否为非法用户；若是，则确定出该第二目标URL为异常暗链；再在排除已经确定出异常暗链的情况下，对待检测网站的当前网页内容进行异常暗链检测。

[0069] 可见，本实施例通过在根据当前网页内容确定出待检测网站中的异常暗链之前，进一步通过筛选出当前网页内容中域名注册时间过期且被非法用户抢注的第二目标URL，能够减少后续根据当前网页内容确定出待检测网站中的异常暗链的操作次数，从而能够进一步提高检测待检测网站的异常暗链的效率。

[0070] 在上述实施例的基础上，本实施例对技术方案作了进一步的说明和优化，具体的，本实施例中，分别判断当前源代码的当前网页结构和当前网页内容与上一次检测时获取的历史源代码的历史网页结构和历史网页内容是否相同的过程，进一步包括：

[0071] 判断当前网页内容中是否存在预设敏感词；

[0072] 若是，则根据当前网页内容中存在的预设敏感词确定出异常暗链。

[0073] 具体的，在本实施例中，是预先设置表征暗链为异常暗链的预设敏感词并进行存储，然后是在判断当前网页内容与上一次检测时对应的历史网页内容是否相同的过程中，在对各网站结构序列进行分词，得到有效的特征向量之后，将分词后的内容，即各特征向量分别与预设敏感词进行比较，若特征向量与预设敏感词相同，则表示该特征向量对应的暗链为异常暗链。

[0074] 可见，本实施例通过进一步利用预设敏感词确定出当前网页内容中的异常暗链，能够减少后续根据当前网页内容确定出待检测网站中的异常暗链的操作次数，从而能够进一步提高检测待检测网站的异常暗链的效率。

[0075] 在上述实施例的基础上，本实施例对技术方案作了进一步的说明和优化，具体的，本实施例中，在根据当前网页内容确定出待检测网站中的异常暗链之前，进一步包括：

[0076] 滤除待检测网站中无效隐藏链接和 / 或属于本域的隐藏链接。

[0077] 在本实施例中，是在根据当前网页内容确定出待检测网站中的异常暗链之前，先滤除待检测网站中的无效隐藏链接和 / 或属于本域的隐藏链接，再对剩余的当前网页内容进行异常暗链的检测。

[0078] 具体的，通过预先设置无效隐藏链接的链接特征或关键词，再通过链接特征或关键词对待检测网站中的当前网页内容进行筛选，确定出与链接特征或关键词对应的链接，即确定出无效隐藏链接。具体的，通过预先获取本域的隐藏连接对应的URL，再根据该URL对待检测网站的当前网页内容进行筛选，确定出本域的隐藏链接。

[0079] 可见，在滤除掉待检测网站中无效隐藏链接和 / 或属于主域和本域的隐藏链接之后，再根据当前网页内容确定出待检测网站中的异常暗链，能够进一步减少检测步骤，进一步提高检测待检测网站的异常暗链的效率。

[0080] 在上述实施例的基础上，本实施例对技术方案作了进一步的说明和优化，具体的，本实施例中，在根据当前网页内容确定出待检测网站中的异常暗链之后，进一步包括：

[0081] 输出确定出的异常暗链。

[0082] 具体的，在本实施例中，是在确定出待检测网站中的异常暗链之后，进一步打印输出确定出的异常暗链。需要说明的是，在实际操作中，可以是以图像或文本或表格的形式输出确定出的异常暗链；本实施例对此不做限定。

[0083] 可见，本实施例通过在根据当前网页内容确定出待检测网站中的异常暗链之后，进一步输出确定出的异常暗链，以便于用户能够更直观便捷地获取异常暗链的信息，从而进一步提升用户的使用体验。

[0084] 另外，在实际操作中，还可以进一步在根据当前网页内容确定出待检测网站中的异常暗链之后，触发预设的提示装置发出对应的提示信息，本实施例对提示信息的类型不做限定，例如，可以是通过蜂鸣器和 / 或指示灯和 / 或语音播放器等提示装置发出提示信息以达到提醒的目的，便于用户更直观地知晓当前已完成检测。

[0085] 上文对于本发明提供的一种网站异常暗链的检测方法的实施例进行了详细的描述，本发明还提供了一种与该方法对应的网站异常暗链的检测装置、设备及计算机可读存储介质，由于装置、设备及计算机可读存储介质部分的实施例与方法部分的实施例相互照应，因此装置、设备及计算机可读存储介质部分的实施例请参见方法部分的实施例的描述，这里暂不赘述。

[0086] 图2为本发明实施例提供的一种网站异常暗链的检测装置的结构图，如图2所示，一种网站异常暗链的检测装置包括：

[0087] 获取模块21，用于获取待检测网站的当前源代码；

[0088] 第一判断模块22，用于分别判断当前源代码的当前网页结构和当前网页内容与上一次检测时获取的历史源代码的历史网页结构和历史网页内容是否相同；若否，则执行第一检测模块23；

[0089] 第一检测模块23，用于根据当前网页内容确定出待检测网站中的异常暗链。

[0090] 本发明实施例提供的网站异常暗链的检测装置，具有上述网站异常暗链的检测方法的有益效果。

[0091] 作为优选的实施方式，一种网站异常暗链的检测装置进一步包括：

[0092] 第一设置模块，用于根据异常暗链的特征设置对应的筛选规则；

[0093] 第一筛选模块，用于利用筛选规则筛选出待检测网站中的异常暗链。

[0094] 作为优选的实施方式，一种网站异常暗链的检测装置进一步包括：

[0095] 第二筛选模块，用于筛选出当前网页内容中预设于白名单中的第一目标URL；

[0096] 第二检测模块，用于对当前网页内容中除了第一目标URL之外的各URL进行检测，确定出异常暗链。

[0097] 作为优选的实施方式，一种网站异常暗链的检测装置进一步包括：

[0098] 第一确定模块，用于确定出当前网页内容中域名注册时间过期的第二目标URL；

[0099] 第二判断模块，用于判断第二目标URL是否为非法用户；若是，则调用第二确定模块；

[0100] 第二确定模块，用于确定第二目标URL为异常暗链。

[0101] 作为优选的实施方式，一种网站异常暗链的检测装置进一步包括：

[0102] 第三判断模块，用于判断当前网页内容中是否存在预设敏感词；若是，则执行第三确定模块；

[0103] 第三确定模块，用于根据当前网页内容中存在的预设敏感词确定出异常暗链。

[0104] 作为优选的实施方式，一种网站异常暗链的检测装置进一步包括：

[0105] 滤除模块，用于滤除待检测网站中无效隐藏链接和 / 或属于本域的隐藏链接。

[0106] 作为优选的实施方式，一种网站异常暗链的检测装置进一步包括：

[0107] 输出模块，用于在根据当前网页内容确定出待检测网站中的异常暗链之后，输出确定出的异常暗链。

[0108] 图3为本发明实施例提供的一种网站异常暗链的检测设备的结构图，如图3所示，一种网站异常暗链的检测设备包括：

[0109] 存储器31，用于存储计算机程序；

[0110] 处理器32，用于执行计算机程序时实现如上述网站异常暗链的检测方法的步骤。

[0111] 本发明实施例提供的网站异常暗链的检测设备，具有上述网站异常暗链的检测方法的有益效果。

[0112] 为解决上述技术问题，本发明还提供一种计算机可读存储介质，计算机可读存储介质上存储有计算机程序，计算机程序被处理器执行时实现如上述网站异常暗链的检测方法的步骤。

[0113] 本发明实施例提供的计算机可读存储介质，具有上述网站异常暗链的检测方法的有益效果。

[0114] 以上对本发明所提供的网站异常暗链的检测方法、装置、设备及计算机可读存储介质进行了详细介绍。本文中应用了具体实施例对本发明的原理及实施方式进行了阐述，以上实施例的说明只是用于帮助理解本发明的方法及其核心思想。应当指出，对于本技术领域的普通技术人员来说，在不脱离本发明原理的前提下，还可以对本发明进行若干改进和修饰，这些改进和修饰也落入本发明权利要求的保护范围内。

[0115] 说明书中各个实施例采用递进的方式描述，每个实施例重点说明的都是与其他实施例的不同之处，各个实施例之间相同相似部分互相参见即可。对于实施例公开的装置而言，由于其与实施例公开的方法相对应，所以描述的比较简单，相关之处参见方法部分说明即可。

[0116] 专业人员还可以进一步意识到，结合本文中所公开的实施例描述的各示例的单元及算法步骤，能够以电子硬件、计算机软件或者二者的结合来实现，为了清楚地说明硬件和软件的可互换性，在上述说明中已经按照功能一般性地描述了各示例的组成及步骤。这些功能究竟以硬件还是软件方式来执行，取决于技术方案的特定应用和设计约束条件。专业技术人员可以对每个特定的应用来使用不同方法来实现所描述的功能，但是这种实现不应认为超出本发明的范围。< / style> < / css>

Claims

1. A method for detecting abnormal dark links on a website, characterized in that: include: Get the current source code of the website to be tested; respectively determining whether the current webpage structure and current webpage content of the current source code are the same as the historical webpage structure and historical webpage content of the historical source code obtained during the last detection; If not, determining the abnormal dark links in the website to be detected according to the current webpage content; Before determining the abnormal dark link in the website to be detected according to the current webpage content, the method further includes: According to the characteristics of the abnormal dark links, corresponding screening rules are set; the abnormal dark links in the to-be-detected website are screened out using the screening rules; wherein the characteristics of the abnormal dark links include hidden features of labels, hidden features of positions, hidden features of colors, hidden features of relative positions, and hidden features of boundaries; After determining the abnormal dark link in the website to be detected according to the current webpage content, the method further includes: Triggering a preset prompt device to send out corresponding prompt information; wherein the types of prompt information include prompt information sent out by a buzzer and / or an indicator light and / or a voice player.

2. The method according to claim 1, characterized in that: Before determining the abnormal dark link in the website to be detected according to the current webpage content, the method further includes: Filter out the first target URL preset in the whitelist in the current webpage content; Each URL in the current webpage content except the first target URL is detected to determine the abnormal dark link.

3. The method according to claim 2, characterized in that Before determining the abnormal dark link in the website to be detected according to the current webpage content, the method further includes: Determine a second target URL in the current webpage content whose domain name registration time has expired; Determine whether the second target URL is from an illegal user; If so, the second target URL is determined to be the abnormal dark link.

4. The method according to claim 1, characterized in that The process of respectively determining whether the current webpage structure and current webpage content of the current source code are the same as the historical webpage structure and historical webpage content of the historical source code obtained during the last detection further includes: Determine whether there are preset sensitive words in the current webpage content; If so, the abnormal dark link is determined according to the preset sensitive words existing in the current web page content.

5. The method according to claim 1, characterized in that Before determining the abnormal dark link in the website to be detected according to the current webpage content, the method further includes: Invalid hidden links and / or hidden links belonging to the domain in the website to be detected are filtered out.

6. The method according to any one of claims 1 to 5, characterized in that: After determining the abnormal dark link in the website to be detected according to the current webpage content, the method further includes: The determined abnormal dark link is output.

7. A device for detecting abnormal dark links on a website, characterized in that: include: The acquisition module is used to obtain the current source code of the website to be detected; A first determination module is used to determine whether the current webpage structure and current webpage content of the current source code are the same as the historical webpage structure and historical webpage content of the historical source code obtained during the last detection; if not, the first detection module is executed; The first detection module is used to determine abnormal dark links in the website to be detected according to the current webpage content; The device for detecting abnormal dark links on a website is specifically used for: According to the characteristics of the abnormal dark links, corresponding screening rules are set; the abnormal dark links in the to-be-detected website are screened out using the screening rules; wherein the characteristics of the abnormal dark links include hidden features of labels, hidden features of positions, hidden features of colors, hidden features of relative positions, and hidden features of boundaries; The device for detecting abnormal dark links on a website is specifically used for: Triggering a preset prompt device to send out corresponding prompt information; wherein the types of prompt information include prompt information sent out by a buzzer and / or an indicator light and / or a voice player.

8. A device for detecting abnormal dark links on a website, characterized in that: include: Memory for storing computer programs; A processor, used to implement the steps of the method for detecting abnormal dark links on a website as described in any one of claims 1 to 6 when executing the computer program.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by the processor, the steps of the method for detecting abnormal dark links on a website as described in any one of claims 1 to 6 are implemented.

Images