Browser-based data transmission method, device and equipment and storage medium

Abstract

The embodiment of the invention discloses a browser-based data transmission method, device and equipment and a storage medium, and relates to the technical field of browsers, the method comprises the steps of obtaining target data corresponding to a data transmission request in response to the data transmission request, scanning the target data based on scanning configuration information, and sending the scanned target data to a server; outputting a scanning result of the target data; if the scanning result meets the preset requirement, processing the target data based on the data transmission request; and if the scanning result does not meet the preset requirement, intercepting the target data. By adopting the method provided by the invention, all the terminals in the local area network are configured to have the same scanning configuration information, the security risk caused by personal modification of scanning configuration is avoided, the data is scanned through the browser end, whether the uploaded / downloaded data have risks can be determined, and the security of the uploaded / downloaded data is improved. In addition, data with potential risks can be intercepted, virus propagation caused by data uploading / downloading by the user is avoided, and the overall network security is further improved.

Description

Technical Field

[0001] This application relates to the technical field of browsers, and in particular, to a data transmission method, device, equipment, and storage medium based on a browser. Background Art

[0002] With the improvement of the degree of informatization and the development of the mobile Internet, various departments and enterprises usually need to use browsers for data transmission in their daily work. During the data transmission process, there may be security risks for the data. For example, malicious code such as computer viruses may be inserted into the data, and the signature of the data may also be tampered with. When individuals and enterprises use electronic devices, it is necessary to check the security of the data to avoid the spread of viruses caused by illegal data.

[0003] Among them, a computer virus refers to a set of computer instructions or program codes that are compiled or inserted into a computer program to damage the computer function or destroy data, affect the use of the computer, and can self-replicate.

[0004] Currently, data can only be scanned and killed on the electronic devices used by individuals and enterprises. There is still a risk of virus transmission during the data transmission process. Once the data is implanted with a virus, it will be spread multiple times on the company's internal network, which will cause immeasurable economic losses to individuals and / or enterprises. Summary of the Invention

[0005] Embodiments of this application provide a data transmission method, device, equipment, and storage medium based on a browser to solve the defect in the related technology that the security of a file cannot be determined before data transmission and there are security risks. The technical solutions are as follows:

[0006] In a first aspect, embodiments of this application provide a data transmission method based on a browser, which is applied to the browser side and includes:

[0007] In response to a data transmission request, obtain the target data corresponding to the data transmission request, scan the target data based on the scan configuration information, and output a scan result of the target data;

[0008] If the scan result meets the preset requirements, process the target data based on the data transmission request; if the scan result does not meet the preset requirements, intercept the target data;

[0009] Among them, the scan configuration information is obtained after responding to a first operation.

[0010] In an optional solution of the first aspect, scanning the target data based on the scan configuration information and outputting a scan result of the target data includes:

[0011] Extract the feature information of the target data, scan the feature information based on at least one feature library configured according to the scan configuration information, and output the scan result of the target data based on the matching degree between the feature information of the target data and the feature codes in at least one feature library configured according to the scan configuration information.

[0012] In an alternative embodiment of the first aspect, the step of matching the feature information of the target data with the feature codes in at least one feature library configured according to the scan configuration information and outputting the scan result of the target data includes:

[0013] If the feature information of the target data successfully matches at least one feature code in the at least one feature library, output the abnormal type of the target data based on the successfully matched feature code as the scan result of the target data.

[0014] In an alternative embodiment of the first aspect, the step of scanning the target data according to the scan configuration information and outputting the scan result of the target data includes:

[0015] Output the risk score of the target data based on the matching degree between the feature information of the target data and the feature codes in at least one feature library configured according to the scan configuration information, and output the scan result of the target data based on the risk score;

[0016] The step of processing the target data based on the data transmission request if the scan result meets the preset requirements includes:

[0017] If the risk score is less than the risk score threshold set by the preset requirements, process the target data based on the data transmission request.

[0018] In an alternative embodiment of the first aspect, the step of intercepting the target data if the scan result does not meet the preset requirements includes:

[0019] If the risk score is greater than or equal to the risk score threshold set by the preset requirements, determine that the scan result does not meet the preset requirements, and intercept the target data to a preset storage path.

[0020] In an alternative embodiment of the first aspect, the method further includes:

[0021] In response to a second operation, determine at least one feature library, and generate the scan configuration information based on the at least one feature library.

[0022] In an alternative embodiment of the first aspect, the scan configuration information includes a whitelist, and the whitelist includes at least one data source address;

[0023] After obtaining the target data corresponding to the data transmission request in response to the data transmission request, the method further includes:

[0024] Obtain the source address of the target data, and match the source address of the target data with at least one data source address in the whitelist;

[0025] If the source address of the target data does not match all the data source addresses in the whitelist, perform the step of scanning the target data based on the scanning configuration information and outputting the scanning result of the target data.

[0026] In a second aspect, an embodiment of the present application further provides a data transmission device based on a browser, including:

[0027] A scanning unit, configured to obtain target data corresponding to the data transmission request in response to the data transmission request, scan the target data based on scanning configuration information, and output a scanning result of the target data;

[0028] If the scanning result meets a preset requirement, a processing unit processes the target data based on the data transmission request;

[0029] The scanning configuration information is obtained by a configuration unit in response to a first operation.

[0030] In a third aspect, an embodiment of the present application further provides an electronic device, including a memory, a processor, and a computer program stored on the memory and executable on the processor. When the processor executes the program, the method provided in the first aspect or any implementation manner of the first aspect of the embodiments of the present application is implemented.

[0031] In a fourth aspect, the present application further provides a non-transitory computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the method provided in the first aspect or any implementation manner of the first aspect of the embodiments of the present application is implemented.

[0032] The beneficial effects brought by the technical solutions provided by some embodiments of the present application at least include:

[0033] A data transmission method based on a browser provided by an embodiment of the present application can obtain scan configuration information when the browser is opened, facilitating an administrator to adjust the configuration information of all terminals. The browser can scan the target data to be transmitted according to the scan configuration information set by the administrator. Thus, all devices on all terminals within a local area network can be configured with the same scan policy conveniently and quickly, thereby avoiding security risks caused by personal modification of the scan configuration. By scanning data on the browser side, not only can it be determined whether the uploaded / downloaded data has risks, but also data with potential risks can be intercepted, avoiding virus transmission caused by users uploading / downloading data and further improving the overall network security. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] In order to more clearly illustrate the technical solutions in the present application or related technologies, the following will briefly introduce the drawings required for use in the description of the embodiments or related technologies. Obviously, the drawings in the following description are some embodiments of the present application. For those of ordinary skill in the art, without creative efforts, other drawings can also be obtained based on these drawings.

[0035] Figure 1 Schematic diagram of an application scenario of a data transmission method based on a browser provided by an embodiment of the present application;

[0036] Figure 2 is a flowchart of a data transmission method based on a browser provided by an embodiment of the present application;

[0037] Figure 3 is a schematic diagram of a prompt box of a data transmission method based on a browser provided by an embodiment of the present application;

[0038] Figure 4 is a flowchart of a data transmission method based on a browser provided by an embodiment of the present application;

[0039] Figure 5 is a flowchart of a data transmission method based on a browser provided by an embodiment of the present application;

[0040] Figure 6 is a schematic diagram of the structure of a data transmission device based on a browser provided by an embodiment of the present application;

[0041] Figure 7 is a schematic diagram of the structure of an electronic device provided by an embodiment of the present application. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0042] To make the objectives, technical solutions and advantages of the present application clearer, the technical solutions in the present application will be clearly and completely described below with reference to the accompanying drawings in the present application. Obviously, the described embodiments are some but not all of the embodiments of the present application. All other embodiments obtained by those of ordinary skill in the art based on the embodiments in the present application without making creative efforts fall within the scope of protection of the present application.

[0043] The terms "including" and "having" and any variations thereof in the specification and claims of the present application and the above-mentioned accompanying drawings are intended to cover non-exclusive inclusion. For example, a process, method, system, product or device that includes a series of steps or modules is not limited to the listed steps or modules, but optionally further includes steps or modules not listed, or optionally further includes other steps or modules inherent to these processes, methods, products or devices.

[0044] It should be noted that the terms "first" and "second" involved in the present application are only used to distinguish similar objects and do not represent a specific order for the objects. Understandably, "first" and "second" can be interchanged in a specific order or sequence when permitted. It should be understood that the objects distinguished by "first" and "second" can be interchanged under appropriate circumstances so that the embodiments of the present application described here can be implemented in an order other than those described or illustrated here.

[0045] Next, please refer to Figure 1 , which is a schematic diagram of an application scenario of a data transmission method based on a browser provided by an exemplary embodiment of the present application. As Figure 1 shown, the application scenario includes: a server 110 and a terminal 120.

[0046] The terminal 120 may include one or more terminals corresponding to customers. At least one browser 121 is installed in the terminal 120. The browser 121 is used to obtain target data corresponding to the data transmission request in response to the data transmission request. At least one plugin for scanning the target data or call the scanning software on the terminal 120 may be installed in the browser 121. The browser 121 may scan the target data based on the scanning configuration information and output a scanning result of the target data. If the scanning result meets the preset requirements, the target data is processed based on the data transmission request; if the scanning result does not meet the preset requirements, the target data is intercepted.

[0047] The terminal 120 may also establish a data relationship with the network and establish a data connection relationship with the server 110 through the network. For example, when the browser 121 is opened, the terminal 120 may obtain the scanning configuration information from the server 110 in response to the operation of opening the browser.

[0048] The browser 121 on the terminal 120 can also scan the target data based on the scan configuration information, output the scan result of the target data, and the browser 121 determines whether to process the target data according to the data transmission request based on the scan result. If the scan result meets the preset requirements, the browser 121 processes the target data according to the data transmission request, otherwise the browser 121 intercepts the target data.

[0049] The server 110 can be servers set up in various places in the company and at home. The server 110 can receive a request for scan configuration information from the terminal 120 through the network and send the scan configuration information to the terminal 120.

[0050] The network can be a medium that provides a communication link between the server 110 and any one terminal 120, or can be the Internet including network devices and transmission media, and is not limited thereto. The transmission medium can be a wired link, such as but not limited to, coaxial cable, optical fiber, and digital subscriber line (DSL), etc., or a wireless link, such as but not limited to, wireless fidelity (WIFI), Bluetooth, and mobile device network, etc.

[0051] It can be understood that Figure 1 The number of the server 110, the terminal 120, and the browser 121 in the terminal 120 in the application scenario of the browser-based data transmission method shown is only an example. In specific implementation, the application scenario can include any number of the server 110, the terminal 120, and the browser 121 in the terminal 120. The embodiments of the present specification do not make specific limitations thereto. For example but not limited to, the server 110 can be a server cluster composed of multiple servers, and the terminal 120 can be a terminal cluster composed of multiple terminals.

[0052] The following describes the present application in detail with reference to specific embodiments.

[0053] Next, in combination with Figure 1 , the browser-based data transmission method provided by the embodiments of the present application is introduced. Specifically, please refer to Figure 2 , Figure 2 shows a schematic flowchart of a browser-based data transmission method provided by an embodiment of the present application. As Figure 2 shown, the method includes the following steps:

[0054] S201, in response to a data transmission request, obtain the target data corresponding to the data transmission request.

[0055] Specifically, a user can initiate a data transfer request on any web page of a browser. A data transfer request can be understood as a request for the user to exchange data with the corresponding server. Through the data transfer request, the target data to be processed and the type of the data transfer request can be determined. The type of the data transfer request can include, but is not limited to, requests for uploading data, downloading data, and rendering page data.

[0056] Exemplarily, the data transfer request for initiating the upload of a file can include, but is not limited to, the following situations: The user can drag the file A1 into the box B on the browser page by dragging, and the browser receives the file A1; The user can also click the button for uploading an attachment, select the path of the file A2 to be transferred in the pop-up dialog box, and click OK to upload the file A2, and the browser receives the file A2.

[0057] Exemplarily, the data transfer request for initiating the download of a file can include, but is not limited to, the following situations: The user can drag the file A3 into the path C where the file needs to be saved on the browser page, and the browser executes the instruction to download the file A3; The user can also click the button for downloading an attachment, and download the target data file A4 to the set storage path through the browser or the downloader bound to the browser, and the browser executes the instruction to download the file A4.

[0058] Exemplarily, the data transfer request for rendering data can include, but is not limited to, the following situations: The user can click on a picture, animated picture, video, etc., and the browser plugin loads the clicked picture, animated picture, video. After the user inputs the link of a website containing images, the browser automatically loads the images in the website after entering the website containing images.

[0059] It can be understood that the browser obtains the target data for uploading, downloading, or rendering, which is essentially caching the corresponding data on the browser side. The procedures for uploading, downloading, or rendering have not been completed. It is necessary to further scan the data to be processed to determine its security before making a decision.

[0060] S202, scan the target data based on the scan configuration information, and output the scan result of the target data.

[0061] Specifically, the scan configuration information can be configured by an administrator or other users on the server at any time. When the user performs the first operation of opening the browser on the terminal, the browser actively obtains the pre-configured scan configuration information from the server; or, after the user performs the first operation of opening the browser on the terminal, the browser connects to the server through the network, and the server actively sends the scan configuration information to the browser.

[0062] Understandably, the scanning configuration information is configured based on each browser. After each browser is launched, the browser will obtain the scanning configuration information from the server.

[0063] Specifically, the browser can scan the target data based on the scanning configuration information. The scanning configuration information can be understood as the scanning strategy for scanning the target data. The object to be scanned, the scanning benchmark, the scanning tool, and the form of the scanning result can be determined through the scanning configuration information.

[0064] Exemplarily, the object to be scanned can include but is not limited to the content of the data, code snippets, the suffix name of the file corresponding to the data, fields in the data, etc. The scanning benchmark can include but is not limited to selecting the benchmark virus library for scanning. One or more virus libraries can be selected to scan the target data. The scanning tool can include but is not limited to scanning the target data through the scanning module embedded in the browser, and the browser can also call the local anti-virus software to complete the scanning of the target data. The form of the scanning result can include but is not limited to determining that the form of the scanning result is a security level score, whether it contains a virus, etc.

[0065] Optionally, the scanning configuration information can be configured or updated according to the second operation. The second operation can be understood as an operation performed by the user or the administrator user on the browser on the server side to adjust the scanning configuration information. After completing the operation of adjusting the scanning configuration information, the server side can send the updated information of the scanning configuration information to each terminal connected to the server, so that the browser on the terminal can obtain the latest scanning configuration information when it is launched.

[0066] In some embodiments, when scanning the target data, the feature information of the target data can be extracted. At least one feature library for scanning can be determined through the scanning configuration information. The feature information of the target data is scanned through at least one feature library, and the matching degree between the feature information of the target data and the feature codes in at least one feature library is obtained. The matching degree between the feature information and the feature codes in at least one feature library is output as the scanning result of the target data.

[0067] Understandably, the feature library is a database file that accumulates historical data and records a type of feature information that poses risks. The feature codes in the feature library include function names, keywords, variable contents commonly used by malicious codes, or combinations of several of them.

[0068] Specifically, the content in the target data can be split into multiple code blocks, and each code block is respectively matched with the phrase definitions in the preset phrase rules to search for specific function names, keywords, and variable contents, so as to determine the specific information in the target data, that is, the feature information. Malicious code detection is performed on the feature information according to the feature code. By comparing the feature information with the feature code, if there is information in the feature information that is the same as or highly similar to the feature code, it indicates that the target data has a security risk.

[0069] Exemplarily, the number of feature codes that are the same as or highly similar to the information in the feature information can be output as the scan result, and the similarity degree with each feature code can also be included in the scan result.

[0070] Optionally, if the feature information of the target data matches at least one feature code in at least one feature library, the abnormal type of the target data can also be output based on the successfully matched feature code as the scan result of the target data.

[0071] Exemplarily, when scanning the flash file in the browser cache, it can be compared based on the feature library and the feature information of the flash file to determine whether the flash file contains feature information that is the same as or similar to the feature code. If there is the same or similar feature information, the abnormal type corresponding to the feature code will be determined. For example, if the feature code that is the same as the feature information is the feature code of a Trojan virus, the scan result that the flash file contains a Trojan virus will be output.

[0072] Furthermore, it is judged whether the scan result meets the preset requirements. If the scan result meets the preset requirements, then S203 is executed to process the target data based on the data transmission request.

[0073] If the scan result meets the preset requirements, then S204 is executed to intercept the target data on the browser side.

[0074] Specifically, the preset requirements can also be correspondingly set according to the scan configuration information. For example, the feature library to be scanned can be set, and the scan result is the matching quantity of the feature code. The preset requirements can be set as the quantity of the matching feature code. For example, the preset requirement is set as the quantity of the matching feature code not being greater than 3. If the quantity of the feature code obtained by scanning the target data through the feature library is 2, then S203 is executed, and the browser processes the target data based on the data transmission request.

[0075] Exemplarily, if the data transmission request is to upload file B1 to website C1, and after scanning file B1 on the browser side to determine that file B1 does not carry malicious code and / or viruses and meets the preset requirements, the browser performs the step of uploading file B1 to website C1; for example, if the data transmission request is to download file B2 from website C2, and file B2 is scanned in the cache area of the browser side, and similarly it is determined that file B2 meets the preset requirements, then the browser performs the step of downloading file B2 from website C2 to local storage, and a prompt box can also be popped up to allow the user to select "Save As" to store file B2 to the set storage path.

[0076] Specifically, if the number of feature codes obtained by scanning the target data through the feature library is 4, then S204 is executed to intercept the target data on the browser side.

[0077] Specifically, the browser's processing of the target data based on the data transmission request can be understood as determining the browser's actions according to the type of the data transmission request. For example, if the data transmission request is for uploading, then after determining that the scan result meets the preset requirements, the corresponding target data is uploaded to the server. For example, if the data transmission request is for downloading, then after determining that the scan result meets the preset requirements, the target data is downloaded from the browser's cache to the storage path specified by the user and downloaded to local storage. For example, if the data transmission request is for rendering web page data, then the browser performs the operation of rendering web page data after determining that the scan result meets the preset requirements.

[0078] Specifically, if the preset requirements are not met, the browser can intercept the target data, and the forms of interception can include but are not limited to deleting the target data, isolating the target data to a preset storage path, and a prompt box 300 for intercepting the target data can also be given after intercepting the target data, as Figure 3 shown, the pop-up window of the browser gives prompt text. For example, it is scanned and determined that there is a security risk in file A5 and it has been actively intercepted. The pop-up window can also prompt the user to take the next step, such as retaining, isolating, or deleting file A5, and the user can execute the corresponding measures by clicking buttons such as retain 310, isolate 320, and delete 330.

[0079] A data transmission method based on a browser provided by an embodiment of the present application can obtain scan configuration information when the browser is started, which is convenient for an administrator to adjust the configuration information of all terminals. The browser can scan the target data to be transmitted according to the scan configuration information set by the administrator. Thus, all devices on all terminals within a local area network can be configured with the same scan policy conveniently and quickly, thereby avoiding security risks caused by personal modification of scan configuration. By scanning data on the browser side, not only can it be determined whether there are risks in directly uploaded / downloaded data, but also data with potential risks can be intercepted, avoiding virus transmission caused by users uploading / downloading data, and further improving the overall network security.

[0080] Next, please refer to Figure 4 , Figure 4 which shows a schematic flowchart of a data transmission method based on a browser provided by an embodiment of the present application. As Figure 4 shown, the method includes the following steps:

[0081] S401, in response to a data transmission request, obtain the target data corresponding to the data transmission request.

[0082] Specifically, please refer to the description in S201, which will not be elaborated here.

[0083] S402, output a risk score of the target data based on the matching degree between the feature information of the target data and the feature codes in at least one feature library configured with the scan configuration information, and output a scan result of the target data based on the risk score.

[0084] Among them, for the scan configuration information, please refer to the description in S202, which will not be elaborated here.

[0085] Specifically, a feature library for scanning the target data can be determined based on the scan configuration information, and the feature codes in the feature library are compared with the feature information of the target data. If the similarity between any feature code in the feature information and any feature code in the feature library is higher than the similarity threshold, it is determined that the feature code in the feature information matches the corresponding feature code in the feature library. The number of feature codes in the feature library that can match the feature code in the feature information can be used as the corresponding matching degree. The more the number of matching feature codes, the higher the matching degree.

[0086] Specifically, a mapping relationship between the matching degree and the risk score can be preset, and the corresponding risk score is output according to the mapping relationship. For example, according to the matching degree from low to high, several levels of risk scores can be set from low to high, or scores can be assigned to different matching degrees respectively. The higher the risk score, the higher the risk of the target data and the easier it is to carry viruses.

[0087] Further, determine whether the risk score meets the preset requirements. If the risk score is less than the risk score threshold set by the preset requirements, then execute S403 to process the target data based on the data transmission request.

[0088] Specifically, please refer to the description in S203, which will not be elaborated here.

[0089] If the risk score is greater than or equal to the risk score threshold set by the preset requirements, then execute S404 to intercept the target data on the browser side.

[0090] Specifically, please refer to the description in S204, which will not be elaborated here.

[0091] Optionally, the risk score threshold can be set separately according to the different sources of the target data. If the source address of the target data is an unfamiliar address, the security requirements are correspondingly increased and the risk score threshold is decreased. Even if the risk score is relatively low, it may still be higher than the risk score threshold. If the source address of the target data is an internal company address, the security requirements can be correspondingly decreased and the risk score threshold can be increased. Even if the risk score is relatively high, it may still be lower than the risk score threshold.

[0092] Optionally, the risk level can be set according to the risk score. For example, the risk levels are low risk, medium risk, and high risk. If the risk score threshold set by the preset requirements is medium risk, then both medium risk and high risk do not meet the preset requirements. Different interception measures can be executed for the target data with different risks. For example, the target data with medium risk can be isolated to a preset storage path, and the local antivirus software can be called to scan again to determine whether there is a risk. If there is no risk, the corresponding target data can be automatically restored; the target data with high risk can also be intercepted to the browser cache, the corresponding target data can be directly deleted, and the corresponding target data can also be shredded by calling the local antivirus software.

[0093] Optionally, multiple security levels can be determined by scanning the configuration information, and different security levels can be selected according to the different target sites accessed by the browser. Different combinations of feature libraries can be applied to each different level. For example, for the internal company website, a lower security level can be set, fewer feature libraries can be selected or only typical features can be scanned, and the global data is not scanned. For the access to external websites, a higher security level can be set, more feature libraries can be selected, and the local antivirus software can also be selected to scan. Different levels of file scan and antivirus can also be set, and different feature libraries can be called to compare with the feature information of the target data.

[0094] It can be understood that the risky target data intercepted by the browser cannot be automatically run after being isolated to the corresponding storage path, and read and write operations can only be performed after the recovery operation.

[0095] In the embodiment of the present application, by performing a risk score on the target data, the scanning result of the target data can be quantified in terms of risk level through the risk score. Furthermore, different measures can be taken for different risk levels, thereby facilitating the user to process data with different risks separately and enabling more flexible processing of data with security risks.

[0096] Next, please refer to Figure 5 , Figure 5 which shows a schematic flowchart of a data transmission method based on a browser provided by an embodiment of the present application. As Figure 5 shown, the method includes the following steps:

[0097] S501, in response to a data transmission request, obtain the target data corresponding to the data transmission request.

[0098] Specifically, please refer to the description in S201, which will not be elaborated here.

[0099] S502, obtain the source address of the target data, and match the source address of the target data with at least one data source address in the whitelist.

[0100] Specifically, the scanning configuration information includes a whitelist, and the whitelist includes at least one data source address. The whitelist can be understood as a list of trusted source addresses.

[0101] If the source address of the target data does not match at least one data source address in the whitelist, that is, the source of the target data does not fall within the whitelist and is obtained from a source address outside the whitelist, then execute S503, scan the target data based on the scanning configuration information, and output the scanning result of the target data.

[0102] Furthermore, determine whether the scanning result meets the preset requirements. If the scanning result meets the preset requirements, then execute S504, and process the target data based on the data transmission request.

[0103] If the scanning result meets the preset requirements, then execute S505 to intercept the target data.

[0104] Specifically, for S504, please refer to the description in S203, and for S505, please refer to the description in S204, which will not be elaborated here.

[0105] If the source address of the target data matches at least one data source address in the whitelist, then S504 can be directly executed to process the target data based on the data transmission request. It can be understood that if the source of the target data is determined to be trusted, the corresponding target data can be directly uploaded, downloaded, or rendered.

[0106] If the source address of the target data matches at least one data source address in the whitelist, S506 can also be executed to adjust the scan configuration information, reduce the corresponding security level of the scan, and execute S503 after S506 to scan the target data based on the adjusted scan configuration information, and output the scan result of the target data.

[0107] Specifically, when adjusting the scan configuration information in S506, several typical risks can be selected from the historical scan data to scan the target data, which can not only detect some typical risks such as Trojans and worm viruses, but also save the scan time.

[0108] The following is the device embodiment of the present application, which can be used to execute the method embodiment of the present application. For the details not disclosed in the device embodiment of the present application, please refer to the method embodiment of the present application.

[0109] Next, please refer to Figure 6 , which is a schematic structural diagram of a browser-based data transmission device provided by an exemplary embodiment of the present application. This device can be implemented as all or part of a terminal through software, hardware, or a combination of both, and can also be integrated as an independent module on a server. The browser-based data transmission device in the embodiment of the present application can be applied to the browser side. The device 600 includes a scanning unit 610, an execution unit 620, and a configuration unit 630, where:

[0110] The scanning unit is configured to, in response to a data transmission request, obtain the target data corresponding to the data transmission request, scan the target data based on the scan configuration information, and output the scan result of the target data;

[0111] If the scan result meets the preset requirements, the execution unit processes the target data based on the data transmission request;

[0112] Among them, the scan configuration information is obtained by the configuration unit in response to the first operation.

[0113] In some embodiments, the scanning unit 610 is configured to extract the feature information of the target data, scan the feature information based on at least one feature library configured by the scan configuration information, and output the scan result of the target data based on the matching degree between the feature information of the target data and the feature codes in at least one feature library configured by the scan configuration information.

[0114] Optionally, if the feature information of the target data matches at least one feature code in the at least one feature library, the scanning unit 610 outputs the abnormal type of the target data based on the successfully matched feature code as the scan result of the target data.

[0115] Optionally, the scanning unit 610 is further configured to output a risk score of the target data based on the matching degree between the feature information of the target data and the feature codes in at least one feature library configured by the scanning configuration information, and output a scanning result of the target data based on the risk score; if the risk score is less than the risk score threshold set by the preset requirements, the execution unit 620 processes the target data based on the data transmission request, and if the risk score is greater than or equal to the risk score threshold set by the preset requirements, it is determined that the scanning result does not meet the preset requirements, then the execution unit 620 intercepts the target data to a preset storage path.

[0116] In some embodiments, the configuration unit is further configured to determine at least one feature library in response to a second operation, and generate the scanning configuration information based on the at least one feature library.

[0117] In some embodiments, the scanning configuration information obtained by the scanning unit 610 includes a whitelist, the whitelist includes at least one data source address, after the scanning unit 610 obtains the target data corresponding to the data transmission request in response to the data transmission request, it is further configured to obtain the source address of the target data, and match the source address of the target data with at least one data source address in the whitelist;

[0118] If the source address of the target data does not match all the data source addresses in the whitelist, the scanning unit 610 scans the target data based on the scanning configuration information and outputs a scanning result of the target data.

[0119] It should be noted that when the device 600 provided in the above embodiments executes the data transmission method based on the browser, only the above division of each functional module is used for illustration. In practical applications, the above functions can be allocated to different functional modules according to needs, that is, the internal structure of the device is divided into different functional modules to complete all or part of the functions described above. In addition, the device provided in the above embodiments and the embodiments of the data transmission method based on the browser belong to the same concept, and the implementation process thereof is detailed in the method embodiments, which will not be elaborated here.

[0120] An embodiment of the present application further provides an electronic device, including a memory, a processor, and a computer program stored on the memory and executable on the processor. When the processor executes the program, it implements the steps of the method in any of the above embodiments.

[0121] Please refer to Figure 7 , which is a structural block diagram of an electronic device provided by an embodiment of the present application.

[0122] As Figure 7As shown, the electronic device 700 includes a processor 701 and a memory 702.

[0123] In the embodiments of the present application, the processor 701 is the control center of the computer system, which may be the processor of a physical machine or the processor of a virtual machine. The processor 701 may include one or more processing cores, such as a 4-core processor, an 8-core processor, etc. The processor 701 may be implemented in at least one hardware form of DSP (Digital Signal Processing), FPGA (Field-Programmable Gate Array), and PLA (Programmable Logic Array).

[0124] The processor 701 may also include a main processor and a coprocessor. The main processor is a processor used to process data in the wake state, also known as the CPU (Central Processing Unit); the coprocessor is a low-power processor used to process data in the standby state.

[0125] The memory 702 may include one or more computer-readable storage media, and the computer-readable storage media may be non-transitory. The memory 702 may also include high-speed random access memory and non-volatile memory, such as one or more disk storage devices and flash storage devices. In some embodiments of the present application, the non-transitory computer-readable storage medium in the memory 702 is used to store at least one instruction, and the at least one instruction is used to be executed by the processor 701 to implement the method in the embodiments of the present application.

[0126] In some embodiments, the electronic device 700 further includes a peripheral device interface 703 and at least one peripheral device. The processor 701, the memory 702, and the peripheral device interface 703 may be connected through a bus or signal lines. Each peripheral device may be connected to the peripheral device interface 703 through a bus, signal lines, or a circuit board. Specifically, the peripheral devices include: a display screen 704, a camera 705, and an audio circuit 706. The peripheral device interface 703 may be used to connect at least one peripheral device related to I / O (Input / Output) to the processor 701 and the memory 702.

[0127] In some embodiments of the present application, the processor 701, the memory 702, and the peripheral device interface 703 are integrated on the same chip or circuit board; in some other embodiments of the present application, any one or two of the processor 701, the memory 702, and the peripheral device interface 703 can be implemented on a separate chip or circuit board. The embodiments of the present application do not make specific limitations in this regard.

[0128] The display screen 704 is used to display the UI. The UI may include graphics, text, icons, videos, and any combination thereof. When the display screen 704 is a touch display screen, the display screen 704 also has the ability to collect touch signals on or above the surface of the display screen 704. The touch signal can be input to the processor 701 for processing as a control signal. At this time, the display screen 704 can also be used to provide virtual buttons and / or a virtual keyboard, also known as soft buttons and / or a soft keyboard.

[0129] In some embodiments of the present application, there may be one display screen 704, which is disposed on the front panel of the electronic device 700; in some other embodiments of the present application, there may be at least two display screens 704, which are respectively disposed on different surfaces of the electronic device 700 or are in a folding design; in still some other embodiments of the present application, the display screen 704 may be a flexible display screen, which is disposed on the curved surface or the folding surface of the electronic device 700. Even, the display screen 704 can also be set to an irregular non-rectangular shape, that is, a special-shaped screen. The display screen 704 can be prepared from materials such as LCD (Liquid Crystal Display) and OLED (Organic Light-Emitting Diode).

[0130] The camera 705 is used to collect images or videos. Optionally, the camera 705 includes a front camera and a rear camera. Generally, the front camera is disposed on the front panel of the electronic device, and the rear camera is disposed on the back of the electronic device. In some embodiments, there are at least two rear cameras, which are any one of a main camera, a depth camera, a wide-angle camera, and a telephoto camera, so as to implement functions such as background blurring by fusing the main camera and the depth camera, panoramic shooting by fusing the main camera and the wide-angle camera, and VR (Virtual Reality) shooting function or other fusion shooting functions. In some embodiments of the present application, the camera 705 may also include a flash. The flash can be a single-color temperature flash or a two-color temperature flash. The two-color temperature flash refers to a combination of a warm light flash and a cold light flash, which can be used for light compensation under different color temperatures.

[0131] The audio circuit 706 may include a microphone and a speaker. The microphone is used to collect sound waves of the user and the environment, and convert the sound waves into electrical signals for input to the processor 701 for processing. For the purpose of stereo collection or noise reduction, there may be multiple microphones, which are respectively arranged at different parts of the electronic device 700. The microphone may also be an array microphone or an omnidirectional collection microphone.

[0132] The power supply 707 is used to supply power to each component in the electronic device 700. The power supply 707 may be alternating current, direct current, a disposable battery, or a rechargeable battery. When the power supply 707 includes a rechargeable battery, the rechargeable battery may be a wired rechargeable battery or a wireless rechargeable battery. A wired rechargeable battery is a battery charged through a wired line, and a wireless rechargeable battery is a battery charged through a wireless coil. The rechargeable battery may also be used to support fast charging technology.

[0133] The block diagram of the electronic device shown in the embodiments of the present application does not limit the electronic device 700. The electronic device 700 may include more or fewer components than shown in the figure, or combine certain components, or adopt different component arrangements.

[0134] The embodiments of the present application also provide a computer-readable storage medium, on which a computer program is stored. When the program is executed by a processor, the steps of the method in any of the foregoing embodiments are implemented. Among them, the computer-readable storage medium may include, but is not limited to, any type of disk, including floppy disks, optical disks, DVDs, CD-ROMs, micro drives, and magneto-optical disks, ROMs, RAMs, EPROMs, EEPROMs, DRAMs, VRAMs, flash memory devices, magnetic cards or optical cards, nano-systems (including molecular memory ICs), or any type of medium or device suitable for storing instructions and / or data.

[0135] Through the description of the above embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus a necessary general hardware platform, and of course, it can also be implemented by hardware. Based on such an understanding, the essence of the above technical solutions, or the part that contributes to the related technologies, can be embodied in the form of a software product. The computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, magnetic disks, optical disks, etc., and includes several instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or some parts of the embodiments.

[0136] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than limiting them; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that they can still modify the technical solutions recorded in the foregoing embodiments, or perform equivalent replacements for some of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the various embodiments of the present application.

Claims

1. A data transmission method based on a browser, characterized in that, Applied to the browser side, including: In response to a data transmission request, obtain the target data corresponding to the data transmission request, scan the target data based on the scan configuration information, and output the scan result of the target data; If the scan result meets the preset requirements, process the target data based on the data transmission request; if the scan result does not meet the preset requirements, intercept the target data; Wherein, the scan configuration information is obtained in response to a first operation.

2. The method according to claim 1, characterized in that, The scanning the target data based on the scan configuration information and outputting the scan result of the target data includes: Extract the feature information of the target data, scan the feature information based on at least one feature library configured by the scan configuration information, and output the scan result of the target data based on the matching degree between the feature information of the target data and the feature codes in at least one feature library configured by the scan configuration information.

3. The method according to claim 2, characterized in that, The matching the feature information of the target data with the feature codes in at least one feature library configured by the scan configuration information and outputting the scan result of the target data includes: If the feature information of the target data matches at least one feature code in the at least one feature library, output the abnormal type of the target data based on the successfully matched feature code as the scan result of the target data.

4. The method according to claim 1 or 2, characterized in that, The scanning the target data based on the scan configuration information and outputting the scan result of the target data includes: Output the risk score of the target data based on the matching degree between the feature information of the target data and the feature codes in at least one feature library configured by the scan configuration information, and output the scan result of the target data based on the risk score; The if the scan result meets the preset requirements, processing the target data based on the data transmission request includes: If the risk score is less than the risk score threshold set by the preset requirements, process the target data based on the data transmission request.

5. The method according to claim 4, characterized in that, The if the scan result does not meet the preset requirements and intercepting the target data includes: If the risk score is greater than or equal to the risk score threshold set by the preset requirements, determine that the scan result does not meet the preset requirements, and intercept the target data to a preset storage path.

6. The method according to claim 1, characterized in that, The method further includes: In response to a second operation, determine at least one feature library, and generate the scan configuration information based on the at least one feature library.

7. The method according to claim 1 or 6, characterized in that, The scan configuration information includes a whitelist, and the whitelist includes at least one data source address; After obtaining the target data corresponding to the data transmission request in response to the data transmission request, further include: Obtain the source address of the target data, and match the source address of the target data with at least one data source address in the whitelist; If the source address of the target data does not match all the data source addresses in the whitelist, execute the step of scanning the target data based on the scan configuration information and outputting the scan result of the target data.

8. A data transmission device based on a browser, characterized in that, Including: A scanning unit, configured to obtain target data corresponding to the data transmission request in response to the data transmission request, scan the target data based on scanning configuration information, and output a scanning result of the target data; If the scanning result meets a preset requirement, a processing unit processes the target data based on the data transmission request; wherein the scanning configuration information is obtained by a configuration unit in response to a first operation.

9. An electronic device, comprising a memory, a processor, and a computer program stored on the memory and executable on the processor, characterized in that, When the processor executes the program, the steps of the method according to any one of claims 1 to 7 are implemented.

10. A non-transitory computer-readable storage medium, on which a computer program is stored, characterized in that, When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images