Web payment page detection method, electronic equipment and computer readable medium

By capturing the changed elements of the web payment page as parent nodes, screening valid parent nodes and using preset rules and risk lists to identify anomalies, the problems of low efficiency and poor accuracy of traditional detection methods are solved, and automated, flexible and efficient detection is achieved.

CN120611389AInactive Publication Date: 2025-09-09HANGZHOU PINGPONG INTELLIGENT TECH CO LTD
View PDF 5 Cites 0 Cited by

Patent Information

Application Number
CN202511114459.9
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-08-11
Publication Date
2025-09-09
Estimated Expiration
Not applicable · inactive patent

AI Technical Summary

Technical Problem

Traditional web payment page detection methods rely on manual visual browsing, which is inefficient and highly subjective. It is difficult to meet the detection requirements of multi-language versions and dynamic regulations, and there is a possibility of missed detection.

Method used

By capturing the changed elements of the web payment page as the parent node, filtering the valid parent nodes, traversing their child nodes, using the preset local language recognition rules and the periodically updated risk list to identify anomalies, and displaying the abnormal content in a visual markup.

Benefits of technology

It realizes the automation of web payment page detection, improves detection efficiency and accuracy, avoids missed detection, ensures the application of the latest detection rules, and improves detection flexibility and accuracy.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN120611389A_ABST
    Figure CN120611389A_ABST
Patent Text Reader

Abstract

The invention discloses a web payment page detection method, electronic equipment and a computer readable medium, and the method comprises the steps: taking a change element as a father node under the condition of recognizing that a web payment page is changed; screening out effective father nodes from the father nodes; traversing all child nodes of any effective father node, updating a risk list according to a preset local language recognition rule and a local maintenance period, and carrying out abnormal recognition on the content of the effective father node and all child nodes of the effective father node; and displaying the identified abnormal content according to a preset visual marking mode. By traversing the change elements and the child nodes thereof, automation of web payment page detection is realized, the efficiency of web payment page detection is improved, display and alarm of abnormal content are realized, occurrence of missing detection is avoided, the accuracy of web payment page detection is further improved, the latest detection rule is ensured to be applied all the time, and the detection efficiency of the web payment page is improved. And the accuracy of web payment page detection is further improved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present application relates to the field of cross-border payment technology, and in particular, to a web payment page detection method, an electronic device, and a computer-readable medium. Background Art

[0002] Cross-border payment regulations require that data from different countries within the same cross-border payment company be isolated. For example, data from a cross-border payment company's site in Country A should not be visible to a site in Country B. However, payment pages can present various vulnerabilities. For example, if text in Country A (often a bank name) appears on a web payment page on a site in Country B, this indicates a data breach at the site in Country A.

[0003] Traditional web payment page detection methods usually rely on manual visual browsing for detection. In recent years, web payment pages often need to support multiple language versions within a specified range and the content must comply with local regulations. Faced with increasingly complex web payment pages, traditional web payment page detection methods require the detector to have a high level of understanding of local languages, regulations, etc., and are highly subjective, inefficient, and there is a possibility of missed detections. Since some detection rules change dynamically over time, it is impossible to apply the changed detection rules in a timely manner.

[0004] Therefore, there is an urgent need for an automatic, efficient and accurate web payment page detection method. Summary of the Invention

[0005] The present application aims to solve one of the technical problems in the related art to a certain extent. To this end, the present application provides a web payment page detection method, an electronic device and a computer-readable medium.

[0006] As a first aspect of the present application, a web payment page detection method is provided, wherein the method comprises: When a change is detected on the web payment page, the changed element is used as the parent node; Filter out valid parent nodes from the parent nodes; Traverse all child nodes of any valid parent node, update the risk list according to the preset local language recognition rules and the local maintenance period, and identify abnormalities in the content of the valid parent node and all its child nodes; The identified abnormal content is displayed according to the preset visual marking method.

[0007] Optionally, traversing all child nodes of any valid parent node, performing abnormality identification on the content of the valid parent node and all child nodes thereof according to preset local language identification rules and a locally maintained periodic updated risk list, includes: Traverse all child nodes of any of the valid parent nodes, perform local language identification on the content of the valid parent node and all its child nodes according to the preset local language identification rules, and perform risk warning word identification on the content of the valid parent node and all its child nodes according to the locally maintained periodically updated risk list.

[0008] Optionally, identifying that a change has occurred on the web payment page includes any of the following: Identify that the web payment page has completed loading of the uniform resource locator URL; Identifying that a user interaction operation occurs on the web payment page; A non-user-triggered content change is identified on the web payment page.

[0009] Optionally, filtering out a valid parent node from each parent node includes: Filtering parent nodes carrying preset tags among the parent nodes to obtain parent nodes not carrying preset tags; wherein the types of the preset tags include script tags, style tags, no-script tags, and inline frame tags; From the parent nodes that do not carry the preset tags, valid parent nodes that are visible in the web payment page and include text content are filtered out.

[0010] Optionally, displaying the identified abnormal content according to a preset visual marking method includes: Binding a predefined Cascading Style Sheet (CSS) class to the identified abnormal content to visually mark the identified abnormal content; According to the number of abnormal contents currently identified, the abnormal content quantity information displayed in suspension on the web payment page is updated.

[0011] Optionally, before binding a predefined cascading style sheet (CSS) class to the identified abnormal content to visually mark the identified abnormal content, the method further includes: For any visually marked content, if the content is different from the identified abnormal content, the content is untied from the predefined cascading style sheet (CSS) class to cancel the visual mark of the content.

[0012] Optionally, displaying the identified abnormal content according to a preset visual marking method includes: if the identified abnormal content does not exist in a locally maintained whitelist, displaying the identified abnormal content according to a preset visual marking method; Correspondingly, after displaying the identified abnormal content according to the preset visual marking method, the method further includes: receiving an external input confirmation indication of normality for the abnormal content, and writing the abnormal content into a locally maintained whitelist.

[0013] Optionally, the preset local language recognition rule includes a preset regular expression.

[0014] As a second aspect of the present application, an electronic device is provided, wherein the electronic device includes: one or more processors; A memory having one or more computer programs stored thereon, wherein when the one or more computer programs are executed by the one or more processors, the one or more processors implement the web payment page detection method described in the first aspect of the present application.

[0015] As a third aspect of the present application, a computer-readable medium is provided, on which a computer program is stored, wherein when the computer program is executed by a processor, the web payment page detection method described in the first aspect of the present application is implemented.

[0016] The web payment page detection method provided by the embodiment of the present application, when a web payment page is changed, uses the changed element as the parent node; selects valid parent nodes from each parent node; traverses all child nodes of any valid parent node, and identifies abnormalities in the content of the valid parent node and all its child nodes based on preset local language recognition rules and a locally maintained periodically updated risk list; and displays the identified abnormal content according to a preset visual marking method. By capturing the changed element when the web payment page is changed as the parent node, drilling down to the content of all child nodes of the parent node, and identifying abnormalities in the content of each node based on preset local language recognition rules and a locally maintained risk list, the method realizes automation of web payment page detection and improves the efficiency of web payment page detection. Furthermore, by displaying the identified abnormal content according to a preset visual marking method, the abnormal content is displayed and alerted, avoiding missed detections, thereby improving the accuracy of web payment page detection. The locally maintained risk list is also periodically updated to ensure that the latest detection rules are always applied, further improving the accuracy of web payment page detection. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] The present application will be further described below with reference to the accompanying drawings: Figure 1 This is a flowchart of an implementation method of the web payment page detection method provided in an embodiment of the present application; Figure 2 This is a flowchart of an implementation method of the web payment page detection method provided in an embodiment of the present application; Figure 3 This is a flowchart of an implementation method of the web payment page detection method provided in an embodiment of the present application; Figure 4 This is a flowchart of an implementation method of the web payment page detection method provided in an embodiment of the present application; Figure 5 This is a flowchart of an implementation method of the web payment page detection method provided in an embodiment of the present application; Figure 6 This is a flowchart of an implementation method of the web payment page detection method provided in an embodiment of the present application; Figure 7 This is a schematic diagram of an execution process of the web payment page detection method provided in an embodiment of the present application; Figure 8 is a schematic diagram of an implementation of an electronic device provided in an embodiment of the present application; Figure 9 is a schematic diagram of a computer-readable medium provided in an embodiment of the present application; Description of Reference Numerals 101: Processor 102: Memory 103: I / O interface 104: bus. DETAILED DESCRIPTION

[0018] The embodiments of the present application are described in detail below. Examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described in the embodiments are intended to be used to explain the present application and should not be construed as limiting the present application.

[0019] References in this specification to "one embodiment," "an example," or "an example" mean that a particular feature, structure, or characteristic described in connection with the embodiment itself can be included in at least one embodiment disclosed herein. The appearances of the phrase "in one embodiment" in various places in the specification are not necessarily all referring to the same embodiment.

[0020] Cross-border payment regulations require that data from different countries within the same cross-border payment company be isolated. For example, data from a cross-border payment company's site in Country A should not be visible to a site in Country B. However, payment pages can present various vulnerabilities. For example, if text in Country A (often a bank name) appears on a web payment page on a site in Country B, this indicates a data breach at the site in Country A.

[0021] Traditional web payment page detection methods usually rely on manual visual browsing for detection. In recent years, web payment pages often need to support multiple language versions within a specified range and the content must comply with local regulations. Faced with increasingly complex web payment pages, traditional web payment page detection methods require the detector to have a high level of understanding of local languages, regulations, etc., and are highly subjective, inefficient, and there is a possibility of missed detections. Since some detection rules change dynamically over time, it is impossible to apply the changed detection rules in a timely manner.

[0022] In this regard, the applicant of this application proposes that the changed elements when the web payment page changes can be captured as the parent node, and the contents of all child nodes of the parent node can be drilled into, and the abnormal content of each node can be identified based on the preset local language recognition rules and the locally maintained risk list, thereby realizing the automation of web payment page detection and improving the efficiency of web payment page detection. Furthermore, the identified abnormal content can be displayed according to the preset visual marking method to avoid the occurrence of missed detection, thereby improving the accuracy of web payment page detection, and the locally maintained risk list can also be periodically updated to ensure that the latest detection rules are always applied, thereby further improving the accuracy of web payment page detection.

[0023] As a first aspect of the embodiment of the present application, a web payment page detection method is provided, such as Figure 1 As shown, the method includes: Step S110: When a change is detected on the web payment page, the changed element is used as the parent node; Step S120, screening out valid parent nodes from the parent nodes; Step S130: traverse all child nodes of any valid parent node, and perform abnormality identification on the content of the valid parent node and all its child nodes according to the preset local language identification rules and the locally maintained periodic update risk list; Step S140: Display the identified abnormal content according to a preset visual marking method.

[0024] It can be understood that the web payment page involved in the embodiments of the present application refers to the web payment page of the cross-border payment system; the change element refers to the source Document Object Model Element (DOM) element that triggers the change when the content or status of the web payment page changes, that is, the target element corresponding to the node update or interactive operation generated when the page changes.

[0025] The embodiment of the present application does not specifically limit how to filter out valid parent nodes from the parent nodes. For example, the filtering can be performed based on whether the parent node is related to payment and whether it is visible to the user.

[0026] The embodiment of the present application does not impose any special limitation on the execution order between step S120 and steps S130 - S140 , that is, step S120 and steps S130 - S140 can actually be executed simultaneously or sequentially.

[0027] Among them, periodic updating of the risk list means that the risk list needs to be updated periodically. The embodiment of the present application does not specifically limit how to periodically update the risk list. For example, a scheduled job can be created and an artificial intelligence (AI) model can be used to obtain the local risk list to update the locally maintained risk list.

[0028] Among them, the embodiments of the present application do not specifically limit the preset visual marking method, as long as it is a visual marking method that can serve as a prompt for abnormal content.

[0029] The web payment page detection method provided by the embodiment of the present application, when a web payment page is changed, uses the changed element as the parent node; selects valid parent nodes from each parent node; traverses all child nodes of any valid parent node, and identifies abnormalities in the content of the valid parent node and all its child nodes based on preset local language recognition rules and a locally maintained periodically updated risk list; and displays the identified abnormal content according to a preset visual marking method. By capturing the changed element when the web payment page is changed as the parent node, drilling down to the content of all child nodes of the parent node, and identifying abnormalities in the content of each node based on preset local language recognition rules and a locally maintained risk list, the method realizes automation of web payment page detection and improves the efficiency of web payment page detection. Furthermore, by displaying the identified abnormal content according to a preset visual marking method, the abnormal content is displayed and alerted, avoiding missed detections, thereby improving the accuracy of web payment page detection. The locally maintained risk list is also periodically updated to ensure that the latest detection rules are always applied, further improving the accuracy of web payment page detection.

[0030] The applicant of this application further proposes that by identifying whether the language of each node content is the local language and whether the content of each node involves risk warning words, the data isolation on the web payment page can be accurately identified. Figure 2 As shown, the traversal of all child nodes of any valid parent node, performing abnormality identification on the content of the valid parent node and all its child nodes (i.e., the process involved in step S130) according to preset local language identification rules and a locally maintained periodic update risk list, includes: Step S131, traverse all child nodes of any of the valid parent nodes, perform local language recognition on the content of the valid parent node and all its child nodes according to the preset local language recognition rules, and perform risk warning word recognition on the content of the valid parent node and all its child nodes according to the locally maintained periodically updated risk list.

[0031] Among them, it can be understood that when it is identified that the language of a certain content does not belong to the language specified in the local language identification rules, it is indicated that the content is abnormal content. When it is identified that a certain content involves a risk warning word specified in the locally maintained periodically updated risk list, it is indicated that the content is abnormal content.

[0032] The embodiments of this application do not specifically limit the languages ​​specified in the local language recognition rules, as this is determined by the type and number of languages ​​required to be provided on the web payment page of the local cross-border payment system. The embodiments of this application also do not specifically limit the risk warning words specified in the periodically updated risk list. For example, they may include internal data identifiers across countries / regions, names of sanctioned financial institutions or organizations, illegal financial terms or operations, statements that violate local financial regulations, etc.

[0033] The applicant of this application further proposes that the change events occurring on the web payment page can be mainly divided into three types. By specifically identifying the three types of change events, the efficiency of web payment page detection can be further improved. Accordingly, in some embodiments, the identification of a change on the web payment page includes any of the following: Identify that the web payment page has completed loading of the Uniform Resource Locator (URL); Identifying that a user interaction operation occurs on the web payment page; A non-user-triggered content change is identified on the web payment page.

[0034] The embodiments of the present application do not impose any specific restrictions on user interaction operations. For example, user interaction operations generally include mouse actions (such as clicking, scrolling, etc.) and text input. The embodiments of the present application also do not impose any specific restrictions on non-user-triggered content changes, which are content changes that can be triggered without the user actively performing interactive operations. For example, changes in payment status and the latest exchange rate automatically pushed by the background.

[0035] Among them, the embodiment of the present application does not specifically limit how to identify changes to the web payment page. For example, these change events can be monitored in real time by installing a plug-in on the front end of the web browser.

[0036] The applicant of this application further proposes that by screening valid parent nodes based on whether the parent node is related to payment and whether it is visible to the user, the efficiency of web payment page detection can be further significantly improved. Figure 3 As shown, the filtering out of the valid parent nodes (i.e., the ones involved in step S120) from the parent nodes includes: Step S121: filtering parent nodes carrying preset tags among the parent nodes to obtain parent nodes not carrying preset tags; wherein the types of the preset tags include script tags, style tags, no-script tags, and inline frame tags; Step S122: Filter out valid parent nodes that are visible in the web payment page and include text content from the parent nodes that do not carry the preset tags.

[0037] Among them, the types of preset tags in the embodiment of the present application include script tags, style tags, no script tags, and inline frame tags. If these tags are carried, it means that the node is a node that comes with the programming language and is not related to the payment function. The parent nodes carrying these tags will be filtered out, which can avoid abnormal identification of the content of the parent node and all its child nodes that are not related to payment, thereby avoiding unnecessary operations, thereby improving the efficiency of web payment page detection.

[0038] Among them, the embodiment of the present application further filters out the parent nodes related to payment that are visible in the web payment page and include text content as valid parent nodes. The fact that the parent nodes are visible in the web payment page and include text content indicates that there is a significant leakage risk for the corresponding parent nodes, and the contents of these parent nodes and all their child nodes need to be strictly identified for abnormalities.

[0039] It should be noted that the embodiments of the present application are not limited to filtering out valid parent nodes that are visible in the web payment page and include text content from the parent nodes that do not carry preset tags. In some scenarios where the efficiency requirements for web payment page detection are relatively low and the security requirements are relatively high, it can be considered to directly use the parent nodes that do not carry preset tags as valid parent nodes.

[0040] The applicant of this application further proposes that the identified abnormal content can be displayed in a differentiated manner by injecting Cascading Style Sheets Class (CSS) classes, and the latest number of abnormal content can be displayed on the web payment page in a floating manner to realize the display and warning of abnormal content, avoid the occurrence of missed detection, and thus improve the accuracy of web payment page detection. Figure 4 As shown, the display of the identified abnormal content according to the preset visual marking method (i.e., the step S140 involved) includes: Step S141 , binding a predefined Cascading Style Sheet (CSS) class to the identified abnormal content to visually mark the identified abnormal content; Step S142: updating the abnormal content quantity information displayed in a suspended manner on the web payment page according to the currently identified abnormal content quantity.

[0041] Among them, the pre-defined cascading style sheet CSS class can configure different display rules for different abnormal node contents (such as box selection, font bolding, font color modification, adding underline, etc.).

[0042] Among them, the embodiment of the present application uses a floating box on the web payment page to dynamically display the latest number of abnormal contents, and replaces the number of abnormal contents displayed in the floating box on the web payment page according to the number of abnormal contents currently identified.

[0043] The applicant of this application further proposes that the web payment page detection method provided in the embodiment of this application can dynamically identify the change events of the web payment page. Therefore, if the abnormal content (which has been visually marked) identified in the historical time is not identified as abnormal content during the current detection, it can be considered to cancel its display, ensuring that only the latest abnormal content identification results are always displayed, which can further improve the accuracy of web payment page detection. Accordingly, in some embodiments, such as Figure 5 As shown, before binding the predefined cascading style sheet (CSS) class to the identified abnormal content to visually mark the identified abnormal content (ie, step S141 ), the method further includes: Step S141′: for any visually marked content, if the content is different from the identified abnormal content, unbind the content from the predefined cascading style sheet (CSS) class to cancel the visual mark of the content.

[0044] Through step S141 ′ and the above-mentioned step S142 , changes in abnormal content can be dynamically displayed, thereby further improving the accuracy of web payment page detection.

[0045] The applicant of this application further proposes to further ensure that the most comprehensive detection rules are always applied by adding a whitelist mechanism and a manual confirmation mechanism for displayed abnormal content, thereby further improving the flexibility and accuracy of web payment page detection. Figure 6 As shown, the display of the identified abnormal content according to the preset visual marking method (i.e., the step S140 involved) includes: Step S210: If the identified abnormal content does not exist in the locally maintained whitelist, the identified abnormal content is displayed according to a preset visual marking method; Accordingly, after displaying the identified abnormal content according to the preset visual marking method (i.e., involved in step S140), the method further includes: Step S220: receiving an externally input confirmation instruction for the abnormal content, and writing the abnormal content into a locally maintained whitelist.

[0046] Among them, after the embodiment of the present application displays the identified abnormal content according to a preset visual marking method, the displayed abnormal content can be manually inspected for a second time. If the manual inspection confirms that the displayed abnormal content is actually normal, the abnormal content can be written into a locally maintained whitelist. When the abnormal content is detected again next time, the abnormal content can be actively released.

[0047] The applicant of this application further proposes that, as one of the easiest and most accurate implementation methods, the preset local language recognition rules can be implemented through regular expressions. Accordingly, in some embodiments, the preset local language recognition rules include preset regular expressions.

[0048] The following is a detailed description of the web payment page detection method provided by this application with reference to a specific embodiment. Figure 7As shown, first, basic filtering is performed on the changed elements of the web payment page; if the changed element carries a preset invalid tag (types include script tags, style tags, noscript tags, inline frame tags, etc.), the process ends; if the changed element does not carry a preset invalid tag, it is determined whether it is a valid parent node (specifically, whether it is visible in the web payment page and whether it contains text content). If it is not a valid parent node, the process ends. If it is a valid parent node, local language identification and risk list detection are performed, and based on the results of local language identification and risk list detection, it is determined whether the node content is abnormal. If it is abnormal, CSS style is injected to visually mark the abnormal content, and the number of displayed abnormal contents is updated. If it is not abnormal, the parent node is drilled down to determine the valid parent node.

[0049] As a second aspect of the embodiments of the present application, an electronic device is provided, wherein, Figure 8 As shown, the electronic device includes: One or more processors 101; The memory 102 stores one or more computer programs. When the one or more computer programs are executed by the one or more processors 101, the one or more processors 101 implement the web payment page detection method provided in the first aspect of the embodiment of the present application.

[0050] The electronic device may further include one or more I / O interfaces 103 connected between the processor 101 and the memory 102 and configured to implement information exchange between the processor 101 and the memory 102 .

[0051] Among them, the processor 101 is a device with data processing capabilities, including but not limited to a central processing unit (CPU); the memory 102 is a device with data storage capabilities, including but not limited to random access memory (RAM, more specifically such as SDRAM, DDR, etc.), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), and flash memory (FLASH); the I / O interface (read-write interface) is connected between the processor and the memory, and can realize information exchange between the processor and the memory, including but not limited to a data bus (Bus), etc.

[0052] In some embodiments, the processor 101 , the memory 102 , and the I / O interface 103 are connected to each other via a bus 104 , and further connected to other components of the computing device.

[0053] As a third aspect of the embodiment of this application, Figure 9As shown, a computer-readable medium is provided, on which a computer program is stored, wherein when the computer program is executed by a processor, the web payment page detection method provided in the first aspect of the embodiment of the present application is implemented.

[0054] Those skilled in the art will appreciate that all or part of the processes in the above-mentioned embodiment methods can be implemented by instructing the relevant hardware through a computer program. Accordingly, the computer program can be stored in a non-volatile computer-readable storage medium, and when the computer program is executed, it can implement the method of any of the above-mentioned embodiments. Among them, any reference to memory, storage, database or other media used in the embodiments provided in the embodiments of the present application may include non-volatile and / or volatile memory. Non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), Synchronous Link DRAM (SLDRAM), Rambus direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

[0055] The above are only specific embodiments of the present application, but the scope of protection of the present application is not limited thereto. Those skilled in the art should understand that the present application includes but is not limited to the contents described in the drawings and the above specific embodiments. Any modifications that do not deviate from the functional and structural principles of the present application are included within the scope of the claims.

Claims

1. A web payment page detection method, characterized in that: The method comprises: When a change is detected on the web payment page, the changed element is used as the parent node; Filter out valid parent nodes from the parent nodes; Traverse all child nodes of any valid parent node, update the risk list according to the preset local language recognition rules and the local maintenance period, and identify abnormalities in the content of the valid parent node and all its child nodes; The identified abnormal content is displayed according to the preset visual marking method.

2. The method according to claim 1, characterized in that The traversal of all child nodes of any valid parent node, and performing abnormality identification on the content of the valid parent node and all child nodes thereof according to preset local language identification rules and a locally maintained periodic updated risk list, includes: Traverse all child nodes of any of the valid parent nodes, perform local language identification on the content of the valid parent node and all its child nodes according to the preset local language identification rules, and perform risk warning word identification on the content of the valid parent node and all its child nodes according to the locally maintained periodically updated risk list.

3. The method according to claim 1, characterized in that Recognizing that a change has occurred on the web payment page includes any of the following: Identify that the web payment page has completed loading of the uniform resource locator URL; Identifying that a user interaction operation occurs on the web payment page; A non-user-triggered content change is identified on the web payment page.

4. The method according to claim 1, wherein The step of filtering out a valid parent node from each of the parent nodes includes: Filtering parent nodes carrying preset tags among the parent nodes to obtain parent nodes not carrying preset tags; wherein the types of the preset tags include script tags, style tags, no-script tags, and inline frame tags; From the parent nodes that do not carry the preset tags, valid parent nodes that are visible in the web payment page and include text content are filtered out.

5. The method according to claim 1, wherein The display of the identified abnormal content according to a preset visual marking method includes: Binding a predefined Cascading Style Sheet (CSS) class to the identified abnormal content to visually mark the identified abnormal content; According to the number of abnormal contents currently identified, the abnormal content quantity information displayed in suspension on the web payment page is updated.

6. The method according to claim 5, characterized in that Before binding the predefined cascading style sheet (CSS) class to the identified abnormal content to visually mark the identified abnormal content, the method further includes: For any visually marked content, if the content is different from the identified abnormal content, the content is untied from the predefined cascading style sheet (CSS) class to cancel the visual mark of the content.

7. The method according to any one of claims 1 to 6, characterized in that The displaying of the identified abnormal content according to a preset visual marking method includes: if the identified abnormal content does not exist in a locally maintained whitelist, displaying the identified abnormal content according to a preset visual marking method; Correspondingly, after displaying the identified abnormal content according to the preset visual marking method, the method further includes: receiving an external input confirmation indication of normality for the abnormal content, and writing the abnormal content into a locally maintained whitelist.

8. The method according to any one of claims 1 to 6, characterized in that The preset local language recognition rule includes a preset regular expression.

9. An electronic device, characterized in that: The electronic device comprises: one or more processors; A memory having one or more computer programs stored thereon, wherein when the one or more computer programs are executed by the one or more processors, the one or more processors implement the web payment page detection method according to any one of claims 1-8.

10. A computer-readable medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the web payment page detection method according to any one of claims 1 to 8 is implemented.

Citation Information

Patent Citations

  • Method, device, equipment and computer readable storage medium for detecting webpage tampering

    CN108520185A

  • Webpage data monitoring method and device, terminal equipment and storage medium

    CN111723259A

  • Web page anomaly detection method, device and system and medium

    CN116662192A

  • Page detection method, device, electronic device and storage medium

    CN119782076A

  • Method and system for displaying security risk value of online payment by color

    US20210319449A1