A page access method and device

Abstract

The present application provides a page access method and device, which relates to the field of communication technology. The method comprises: obtaining an access message; obtaining a security domain name group, wherein the security domain name group includes a secure primary domain name and multiple subdomain names of the primary domain name; determining a target primary domain name and a target subdomain name that hit the security domain name group in the access message; and displaying data corresponding to the target primary domain name and data corresponding to the target subdomain name in a target page corresponding to the access message. Thus, the access effect based on domain name access is improved, and the problem that some secure content cannot be displayed in the access page is solved.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a page access method and device. Background Art

[0002] Traditional firewalls generally configure policies based on IP addresses and then process services based on IP addresses. However, in actual use, for some business servers, the servers themselves are not used to manage domains, resulting in the inability to accurately know the server's IP and IP range. Only the server's domain name can be known, and applications are accessed based on the domain name.

[0003] Currently, the address object group has been implemented to obtain domain names from DNS. However, when accessing based on the domain name, some windows often cannot be opened, or only text appears on the page and pictures cannot be refreshed, resulting in a poor user experience.

[0004] Therefore, how to improve the access effect based on domain name access and solve the problem that some secure content cannot be displayed on the access page is one of the technical issues worth considering. Summary of the invention

[0005] In view of this, the present application provides a page access method and device to improve the access effect based on domain name access and solve the problem that some secure content cannot be displayed in the access page.

[0006] Specifically, the present application is implemented through the following technical solutions:

[0007] According to a first aspect of the present application, a page access method is provided, comprising:

[0008] Get access message;

[0009] Acquire a secure domain name group, wherein the secure domain name group includes a secure primary domain name and multiple subdomain names of the primary domain name;

[0010] Determine a target primary domain name and a target subdomain name that hit the security domain name group in the access message;

[0011] The data corresponding to the target main domain name and the data corresponding to the target subdomain name are displayed in the target page corresponding to the access message.

[0012] Optionally, the secure domain name group is generated according to the following method:

[0013] Get the historical access messages of each page;

[0014] Extracting the main domain name and subdomain name from the historical access message;

[0015] Matching the primary domain name and subdomain name in the historical access message with a domain name feature library to screen out safe primary domain names and subdomain names;

[0016] Write the filtered secure primary domain names and subdomain names into the secure domain name group.

[0017] Optionally, the page access method provided in this embodiment further includes:

[0018] When the domain name in the access message does not hit the security domain name group, extracting the main domain name and the subdomain name from the access message;

[0019] Matching the primary domain name and the subdomain name in the access message with the domain names in the domain name feature library to screen out safe primary domain names and safe subdomain names;

[0020] The data corresponding to the secure primary domain name and the data corresponding to the secure subdomain name are displayed on the target page.

[0021] Optionally, the page access method provided in this embodiment further includes:

[0022] The secure primary domain name and the secure subdomain name screened out from the access message are written into the secure domain name group.

[0023] Optionally, before obtaining the access message, the following steps are further included:

[0024] Enable the domain name detection function;

[0025] Optionally, before obtaining the historical access messages of each page, the following is further included:

[0026] Enable the domain name transparent proxy function.

[0027] According to a second aspect of the present application, a page access device is provided, comprising:

[0028] A first acquisition module, used to acquire an access message;

[0029] A second acquisition module is used to acquire a secure domain name group, wherein the secure domain name group includes a secure primary domain name and multiple subdomain names of the primary domain name;

[0030] A determination module, used to determine a target primary domain name and a target subdomain name that hit the security domain name group in the access message;

[0031] The page display module is used to display the data corresponding to the target main domain name and the data corresponding to the target subdomain name in the target page corresponding to the access message.

[0032] Optionally, the page access device provided by this embodiment further includes:

[0033] The third acquisition module is used to obtain the historical access messages of each page;

[0034] A first extraction module, used to extract the main domain name and subdomain name from the historical access message;

[0035] A first matching module, used for matching the primary domain name and subdomain name in the historical access message with a domain name feature library to screen out safe primary domain names and subdomain names;

[0036] The first writing module is used to write the screened secure primary domain name and subdomain name into the secure domain name group.

[0037] Optionally, the page access device provided by this embodiment further includes:

[0038] A second extraction module, configured to extract a primary domain name and a subdomain name from the access message when the domain name in the access message does not hit the security domain name group;

[0039] A second matching module is used to match the main domain name and subdomain name in the access message with the domain name in the domain name feature library to screen out safe main domain names and safe subdomain names;

[0040] The page display module is also used to display the data corresponding to the secure primary domain name and the data corresponding to the secure subdomain name in the target page.

[0041] Optionally, the page access device provided by this embodiment further includes:

[0042] The second writing module is used to write the secure primary domain name and the secure subdomain name screened out from the access message into the secure domain name group.

[0043] Optionally, the page access device provided by this embodiment further includes:

[0044] A first enabling module, used to enable a domain name detection function before the first acquiring module acquires the access message;

[0045] The second enabling module is used to enable the domain name transparent proxy function before the third obtaining module obtains the historical access messages of each page.

[0046] According to the third aspect of the present application, an electronic device is provided, including a processor and a machine-readable storage medium, the machine-readable storage medium storing a computer program that can be executed by the processor, and the processor is prompted by the computer program to execute the method provided in the first aspect of the embodiment of the present application.

[0047] According to the fourth aspect of the present application, a machine-readable storage medium is provided, which stores a computer program. When called and executed by a processor, the computer program prompts the processor to execute the method provided in the first aspect of the embodiment of the present application.

[0048] Beneficial effects of the embodiments of the present application:

[0049] In the page access method and device provided in the embodiment of the present application, after obtaining the access message, a pre-configured security domain name group is obtained. Since the security domain name group includes a secure primary domain name and a secure subdomain name, the target primary domain name and the target subdomain name of the access message hitting the security domain name group can be determined based on the security domain name group. Therefore, the data corresponding to the target primary domain name and the data corresponding to the target subdomain name can be displayed in the target page corresponding to the access message, thereby avoiding the problem in the prior art that only the data corresponding to the primary domain name is displayed while the data corresponding to the secure subdomain name cannot be displayed, that is, the problem that some secure content cannot be displayed in the access page is solved, while improving the access effect based on domain name access and the user's page access experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] Figure 1 It is a flow chart of a page access method provided by an embodiment of the present application;

[0051] Figure 2 It is a structural diagram of a page access device provided in an embodiment of the present application;

[0052] Figure 3 It is a hardware structure diagram of an electronic device for implementing a page access method provided in an embodiment of the present application. DETAILED DESCRIPTION

[0053] Here, exemplary embodiments will be described in detail, and examples thereof are shown in the accompanying drawings. When the following description refers to the accompanying drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present application. Instead, they are only examples of devices and methods consistent with some aspects of the present application.

[0054] The terms used in this application are only for the purpose of describing specific embodiments and are not intended to limit this application. The singular forms of "a", "said" and "the" used in this application are also intended to include plural forms, unless the context clearly indicates other meanings. It should also be understood that the term "and / or" used in this article refers to and includes any or all possible combinations of one or more corresponding listed items.

[0055] It should be understood that although the terms first, second, third, etc. may be used in the present application to describe various information, these information should not be limited to these terms. These terms are only used to distinguish the same type of information from each other. For example, without departing from the scope of the present application, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information. Depending on the context, the word "if" as used herein may be interpreted as "at the time of" or "when" or "in response to determining".

[0056] The page access method provided by this application is described in detail below.

[0057] See also Figure 1 , Figure 1 This is a flow chart of a page access method provided by the present application. The page access method can be applied to a network device, which can be, but is not limited to, a network security device. For example, the network security device can be a firewall device. When the network device executes the method, it can include the following steps:

[0058] S101: Obtain an access message.

[0059] In this step, the access message may be, but is not limited to, an access message for accessing a page.

[0060] S102: Acquire a secure domain name group, where the secure domain name group includes a secure primary domain name and multiple subdomain names of the primary domain name.

[0061] In this step, in order to ensure the normal display of secure data in the page during page access, that is, to avoid the situation where some windows of the whitelisted web page cannot be opened, or only text is displayed without displaying pictures, the present application proposes to pre-configure a secure domain name group and write the secure primary domain name and subdomain name into the secure domain name group.

[0062] Optionally, the primary domain name and subdomain name in the above-mentioned secure domain name group can be configured by the operation and maintenance personnel, that is, the network device receives the secure primary domain name and secure subdomain name entered by the operation and maintenance personnel, thereby obtaining the above-mentioned secure domain name group. The operation and maintenance personnel can determine the secure primary domain name and subdomain name based on experience, for example, analyze each page based on experience, and then determine the secure primary domain name and secure subdomain name of each page, and then enter them into the network device in a command or the like, thereby obtaining the above-mentioned secure domain name group.

[0063] S103: Determine a target primary domain name and a target subdomain name that hit the security domain name group in the access message.

[0064] In this step, after obtaining the secure domain name group, since the domain names in the secure domain name group are secure, the domain names in the access message can be compared with the domain names in the secure domain name group to filter out the secure primary domain names and subdomain names in the access message, that is, the above-mentioned target primary domain name and the above-mentioned target subdomain name. Accordingly, the primary domain names and subdomain names with security risks can also be eliminated.

[0065] It should be noted that if it is identified that the main domain name is not in the security domain name group, there is no need to identify whether the subdomain name is in the security domain name group. On this basis, when it is identified that the main domain name in the access message is not in the security domain name group, the access message can be directly discarded. When the main domain name is identified in the security domain name group, it is identified whether the subdomain name in the access message is in the security domain name group to identify the target subdomain name in the security domain name group.

[0066] S104: Displaying data corresponding to the target primary domain name and data corresponding to the target subdomain name in a target page corresponding to the access message.

[0067] In this step, after the safe target primary domain name and target subdomain name in the access message are identified based on step S104, the target page corresponding to the access message including the data corresponding to the target primary domain name and the data corresponding to the target subdomain name can be displayed to the user. Thus, it is realized that the data corresponding to all safe domain names are displayed on the page, thereby avoiding the problem that the page only displays the data of the primary domain name and the data of the safe subdomain name cannot be displayed in the prior art, thereby improving the user's page access experience.

[0068] By implementing the page access method provided by the present application, after obtaining the access message, a pre-configured security domain name group is obtained. Since the security domain name group includes a secure primary domain name and a secure subdomain name, the target primary domain name and the target subdomain name of the access message hitting the security domain name group can be determined based on the security domain name group. Therefore, the data corresponding to the target primary domain name and the data corresponding to the target subdomain name can be displayed in the target page corresponding to the access message, thereby avoiding the problem in the prior art that only the data corresponding to the primary domain name is displayed while the data corresponding to the secure subdomain name cannot be displayed, that is, the problem that some secure content cannot be displayed in the access page is solved, while improving the access effect based on domain name access and the user's page access experience.

[0069] It is worth noting that in the implementation Figure 1 Before the process shown, that is, before obtaining the access message in step S101, it can be implemented by turning on the domain name detection function, that is, the DNS snooping function. Under this function, the network device can only extract the safe target primary domain name and target subdomain name from the access message based on the security domain name group, without being limited to the coverage monitoring of all messages, thereby improving the monitoring efficiency.

[0070] Optionally, the above-mentioned secure domain name group can be generated according to the following method: obtain historical access messages of each page; extract the main domain name and subdomain name from the above-mentioned historical access messages; match the main domain name and subdomain name in the above-mentioned historical access messages with the domain name feature library to screen out secure primary domain names and subdomain names; write the screened secure primary domain name and subdomain name into the secure domain name group.

[0071] Specifically, in order to achieve access efficiency for subsequent page visits, the present application will dynamically update the security domain name group based on the pre-maintained security domain name group, that is, the network device will extract the main domain name from the historical access message for each historically visited page. When the main domain name is a whitelist domain name, for example, the main domain name is in a trusted domain name feature library, the main domain name is a safe main domain name, and then the subdomain name is extracted from the historical access message, and then the extracted subdomain name is compared with the domain name feature library, so that the subdomain name included in the domain name feature library, that is, the above-mentioned safe subdomain name, can be screened out, so that the safe main domain name and the safe subdomain name of the historical access message can be added to the safe domain name group.

[0072] It should be noted that the domain names in the above domain name feature library are trusted domain names, which are pre-configured by the operation and maintenance personnel, that is, the currently existing trusted and secure domain names and subdomain names can be written into the domain name feature library. By providing a domain name feature library, the security of the released subdomain names is improved, that is, the security of the data corresponding to the secure subdomain names displayed on the target page is guaranteed. On this basis, when the network device updates the secure domain name group, it will turn on the domain name reputation function (domain-reputation), that is, before obtaining the historical access messages of each page, the domain name reputation function is turned on. On this basis, for the historical access messages of each page, the main domain name and subdomain name will be extracted from the historical access messages, and then matched with the domain name feature library, so as to identify the secure main domain name and subdomain name, and then add them to the secure domain name group.

[0073] It should be noted that when executing the above process, that is, when generating a secure domain name group, the domain name transparent proxy function in the network device will be enabled, that is, it will be implemented through the dns transparent-proxy enable command line. In this way, the domain name transparent proxy in the network device can parse and process the access message of the page to extract the main domain name and all its subdomain names, and then generate a domain name table entry based on the extracted main domain name and subdomain names. Then, after the domain name reputation function is enabled, the domain name table entry is matched with the domain name in the domain name feature library to obtain the main domain name and subdomain name that can be added to the secure domain name group.

[0074] Optionally, after the domain name table entry is generated, it can be output for display, and then a joining option can be provided in the display page so that the operation and maintenance personnel can add the domain names in the domain name table entry to the security domain name group based on the joining option, thereby realizing visual operation of the domain name and visual control of the joining of the domain name, thereby improving the user experience.

[0075] Optionally, based on any of the above embodiments, the page access method provided in this embodiment may also include the following process: when the domain name in the access message does not hit the secure domain name group, extracting the primary domain name and subdomain name from the access message; matching the primary domain name and subdomain name in the access message with the domain names in the domain name feature library to screen out secure primary domain names and secure subdomain names; and displaying the data corresponding to the secure primary domain name and the data corresponding to the secure subdomain name in the target page.

[0076] Specifically, when the primary domain name extracted from the access message is not in the security domain name group, the network device can generally discard the access message; however, in order to avoid the accidental discarding of the access message, the present application proposes that the network device can match the primary domain name and subdomain name in the access message with the domain name in the domain name feature library. When it is confirmed that the domain name feature library includes the primary domain name, it is then confirmed whether the domain name feature library includes the subdomain name. When it is determined that only the primary domain name is included but not the subdomain name, only the data corresponding to the primary domain name is displayed on the target page corresponding to the access message; and when it is confirmed that the domain name feature library includes the primary domain name and subdomain name of the access message, the data corresponding to the primary domain name and the data corresponding to the subdomain name in the access message included in the domain name feature library are displayed on the target page, thereby avoiding the occurrence of problems such as the omission of the display of the target page corresponding to the access message.

[0077] Furthermore, the page access method provided in this embodiment may also include the following process: writing the secure primary domain name and the secure subdomain name screened out in the access message into the secure domain name group.

[0078] Since the above embodiment has identified that the domain name feature library includes the main domain name of the access message and at least one subdomain name, in order to quickly display the pages accessed by subsequent access messages, this embodiment proposes that the secure main domain name and the secure subdomain name will be written into the secure domain name group.

[0079] In addition, the page access method provided by this embodiment may also include: maintaining the write time of the main domain name and subdomain name in the security domain name group, and recording the number of accesses and uses of each main domain name and subdomain name; for each main domain name, when it is confirmed that the write time of the main domain name reaches the set time, but the number of uses is less than the set number, the main domain name is removed from the security domain name group, and the subdomain name corresponding to the main domain name is proposed. For each subdomain name, when it is confirmed that the write time of the subdomain name reaches the set time, but the number of uses is less than the set number, the subdomain name is removed from the security domain name group.

[0080] By implementing the page access method provided by any embodiment of the present application, by adding a secure primary domain name and subdomain name to a secure domain name group, after receiving an access message, the secure primary domain name and subdomain name included in the access message can be identified based on the secure domain name group, so that the data corresponding to the primary domain name and the subdomain name can be displayed on the target page. In this way, there will be no problem of only displaying the data of the primary domain name on the target page where the access message is located, resulting in the data corresponding to the subdomain name not being able to be displayed, that is, there will no longer be problems such as some windows on the page cannot be opened and pictures cannot be refreshed, thereby improving the user experience.

[0081] Based on the same inventive concept, the present application also provides a page access device corresponding to the above page access method. The implementation of the page access device can refer to the above description of the page access method, which will not be discussed here one by one.

[0082] See also Figure 2 , Figure 2 A page access device provided by an exemplary embodiment of the present application is applied to a network device, and the device includes:

[0083] A first acquisition module 201, used to acquire an access message;

[0084] A second acquisition module 202 is used to acquire a secure domain name group, wherein the secure domain name group includes a secure primary domain name and multiple subdomains of the primary domain name;

[0085] A determination module 203 is used to determine a target primary domain name and a target subdomain name that hit the security domain name group in the access message;

[0086] The page display module 204 is used to display the data corresponding to the target main domain name and the data corresponding to the target subdomain name in the target page corresponding to the access message.

[0087] Optionally, based on the above embodiment, the page access device provided in this embodiment further includes:

[0088] A third acquisition module (not shown in the figure) is used to obtain historical access messages of each page;

[0089] A first extraction module (not shown in the figure), used to extract the main domain name and subdomain name from the historical access message;

[0090] A first matching module (not shown in the figure), used to match the primary domain name and subdomain name in the historical access message with a domain name feature library to screen out safe primary domain names and subdomain names;

[0091] The first writing module (not shown in the figure) is used to write the screened safe primary domain name and subdomain name into the safe domain name group.

[0092] Optionally, based on the above embodiment, the page access device provided in this embodiment further includes:

[0093] A second extraction module (not shown in the figure), configured to extract a primary domain name and a subdomain name from the access message when the domain name in the access message does not hit the secure domain name group;

[0094] A second matching module (not shown in the figure) is used to match the main domain name and subdomain name in the access message with the domain name in the domain name feature library to screen out safe main domain names and safe subdomain names;

[0095] The page display module 204 is further configured to display data corresponding to the secure primary domain name and data corresponding to the secure subdomain name in the target page.

[0096] Optionally, based on the above embodiment, the page access device provided in this embodiment further includes:

[0097] The second writing module (not shown in the figure) is used to write the secure primary domain name and the secure subdomain name screened out from the access message into the secure domain name group.

[0098] Optionally, based on the above embodiment, the page access device provided in this embodiment further includes:

[0099] A first enabling module (not shown in the figure), configured to enable a domain name detection function before the first acquiring module acquires the access message;

[0100] The second enabling module (not shown in the figure) is used to enable the domain name transparent proxy function before the third obtaining module obtains the historical access messages of each page.

[0101] In the page access device provided in the embodiment of the present application, after obtaining the access message, a pre-configured security domain name group is obtained. Since the security domain name group includes a secure primary domain name and a secure subdomain name, the target primary domain name and the target subdomain name of the access message hitting the security domain name group can be determined based on the security domain name group. Therefore, the data corresponding to the target primary domain name and the data corresponding to the target subdomain name can be displayed in the target page corresponding to the access message, thereby avoiding the problem in the prior art that only the data corresponding to the primary domain name is displayed while the data corresponding to the secure subdomain name cannot be displayed, that is, the problem that some secure content cannot be displayed in the access page is solved, while the access effect based on domain name access and the user's page access experience are improved.

[0102] Based on the same inventive concept, an embodiment of the present application provides an electronic device, which may be, but is not limited to, the above-mentioned network device. Figure 3 As shown, the electronic device includes a processor 301 and a machine-readable storage medium 302, the machine-readable storage medium 302 stores a computer program that can be executed by the processor 301, and the processor 301 is prompted by the computer program to execute the page access method provided by any embodiment of the present application. In addition, the electronic device also includes a communication interface 303 and a communication bus 304, wherein the processor 301, the communication interface 303, and the machine-readable storage medium 302 communicate with each other through the communication bus 304.

[0103] The communication bus mentioned in the above electronic device can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The communication bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus.

[0104] The communication interface is used for communication between the above electronic device and other devices.

[0105] The machine-readable storage medium 302 may be a memory, which may include a random access memory (RAM), a DDR SRAM (Double Data Rate Synchronous Dynamic Random Access Memory), or a non-volatile memory (NVM), such as at least one disk memory. Optionally, the memory may also be at least one storage device located away from the processor.

[0106] The above-mentioned processor can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

[0107] As for the electronic device and machine-readable storage medium embodiments, since the method contents involved are basically similar to the aforementioned method embodiments, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiments.

[0108] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0109] The implementation process of the functions and effects of each unit / module in the above-mentioned device is specifically described in the implementation process of the corresponding steps in the above-mentioned method, which will not be repeated here.

[0110] For the device embodiments, since they basically correspond to the method embodiments, the relevant parts can refer to the partial description of the method embodiments. The device embodiments described above are merely schematic, wherein the units / modules described as separate components may or may not be physically separated, and the components displayed as units / modules may or may not be physical units / modules, that is, they may be located in one place, or they may be distributed on multiple network units / modules. Some or all of the units / modules may be selected according to actual needs to achieve the purpose of the present application. A person of ordinary skill in the art can understand and implement it without creative work.

[0111] The above description is only a preferred embodiment of the present application and is not intended to limit the present application. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present application shall be included in the scope of protection of the present application.

Claims

1. A page access method, characterized in that: include: Get access message; Acquire a secure domain name group, wherein the secure domain name group includes a secure primary domain name and multiple subdomain names of the primary domain name; Determine a target primary domain name and a target subdomain name that hit the security domain name group in the access message; The data corresponding to the target main domain name and the data corresponding to the target subdomain name are displayed in the target page corresponding to the access message.

2. The method according to claim 1, characterized in that Generate the secure domain name group as follows: Get the historical access messages of each page; Extracting the main domain name and subdomain name from the historical access message; Matching the primary domain name and subdomain name in the historical access message with a domain name feature library to screen out safe primary domain names and subdomain names; Write the filtered secure primary domain names and subdomain names into the secure domain name group.

3. The method according to claim 1, characterized in that Also includes: When the domain name in the access message does not hit the security domain name group, extracting the main domain name and the subdomain name from the access message; Matching the primary domain name and the subdomain name in the access message with the domain names in the domain name feature library to screen out safe primary domain names and safe subdomain names; The data corresponding to the secure primary domain name and the data corresponding to the secure subdomain name are displayed on the target page.

4. The method according to claim 3, characterized in that Also includes: The secure primary domain name and the secure subdomain name screened out from the access message are written into the secure domain name group.

5. The method according to claim 2, characterized in that: Before obtaining the access message, it also includes: Enable the domain name detection function; Before obtaining the historical access messages of each page, it also includes: Enable the domain name transparent proxy function.

6. A page access device, characterized in that: include: A first acquisition module, used to acquire an access message; A second acquisition module is used to acquire a secure domain name group, wherein the secure domain name group includes a secure primary domain name and multiple subdomain names of the primary domain name; A determination module, used to determine a target primary domain name and a target subdomain name that hit the security domain name group in the access message; The page display module is used to display the data corresponding to the target main domain name and the data corresponding to the target subdomain name in the target page corresponding to the access message.

7. The device according to claim 6, characterized in that Also includes: The third acquisition module is used to obtain the historical access messages of each page; A first extraction module, used to extract the main domain name and subdomain name from the historical access message; A first matching module, used for matching the primary domain name and subdomain name in the historical access message with a domain name feature library to screen out safe primary domain names and subdomain names; The first writing module is used to write the screened secure primary domain name and subdomain name into the secure domain name group.

8. The device according to claim 6, characterized in that Also includes: A second extraction module, configured to extract a primary domain name and a subdomain name from the access message when the domain name in the access message does not hit the security domain name group; A second matching module is used to match the main domain name and subdomain name in the access message with the domain name in the domain name feature library to screen out safe main domain names and safe subdomain names; The page display module is also used to display the data corresponding to the secure primary domain name and the data corresponding to the secure subdomain name in the target page.

9. The device according to claim 8, characterized in that Also includes: The second writing module is used to write the secure primary domain name and the secure subdomain name screened out from the access message into the secure domain name group.

10. The device according to claim 7, characterized in that Also includes: A first enabling module, used to enable a domain name detection function before the first acquiring module acquires the access message; The second enabling module is used to enable the domain name transparent proxy function before the third obtaining module obtains the historical access messages of each page.

Images