41 results about "Web proxy" patented technology

A computer-implemented method for management of an application on an enterprise network which accesses external networks via a web proxy. The method comprises obtaining enriched metadata concerning an application executed on the enterprise network, the enriched metadata including at least source code information and ownership information, identifying application traffic on the enterprise network based on proxy log data, source IP and destination URL, generating an access control list (ACL) based on the enriched metadata and identified application traffic, the ACL including a source address of the application and a list of allowed destination addresses, converting the ACL into a proxy policy that can be processed by a web proxy to permit access by the application to the destination addresses in the ACL, and establishing data communication between the application and an external network based on the proxy policy.

The invention discloses an Android system transparent proxy method based on Root authority, and relates to the technical field of network proxy of mobile equipment. According to the method, transparent interception and forwarding of TCP and UDP traffic are realized by acquiring Root permission of an Android system and combining proxy service and a traffic management tool, and dependence on VPNService API is avoided, so that VPN detection is bypassed. According to the method, proxy configuration and rules are dynamically managed through an interface or a script, a filtering condition is set based on an application UID to achieve local proxy, a specific flow bypassing strategy is configured, and a user-defined chain is constructed through iptables to process flows of different sources. Meanwhile, the method supports transparent redirection of DNS requests to control domain name resolution. Compared with the prior art, the method has the advantages of no VPN (Virtual Private Network), flexible configuration, high detection resistance and the like, and is suitable for network control and privacy protection scenes of the Android equipment.

The application discloses an SSL VPN tunnel transmission method for an IP layer, and relates to the technical field of network communication.The method constructs an IP virtual tunnel outside an SSL session, and directly encapsulates and transmits complete IP messages, thereby completely breaking through the limitation that a traditional SSL VPN only supports a Web proxy, and transparently passing through the tunnel for TCP services, UDP streaming media, ICMP network diagnostic messages, and the like, so that the method realizes remote access of the IP layer in a true sense, and a server adopts a south-north decoupling design, a virtual network port is used as a southward interface to communicate with a client tunnel, and the northward directly interacts with an intranet physical network card through a system routing table, without analyzing transport layer content, without maintaining a TCP connection state, and only performing IP layer transparent forwarding, so that the processing cost is greatly reduced, and the throughput performance is obviously improved.

The invention provides a network agent implementation method and device based on a plug-in architecture and a storage medium, and is applied to the field of computer networks. The method comprises the steps that a network agent is started and operated, processing requests of services are received based on the network agent, and the network agent can receive the processing requests of different types of services; whether plug-in development exists in the service is judged based on the configuration file of the service, if yes, plug-in configuration detection is carried out in the execution process of the processing request of the service, and a node with plug-in configuration is determined as a pause node; stopping executing the processing request of the service at the pause node, executing plug-in logic corresponding to plug-in configuration, and continuing to execute the processing request of the service on the basis of the pause node of the processing request of the service after the plug-in logic is executed; and if not, executing the processing request of the service based on the execution flow of the processing request of the service and the network agent. According to the method, the technical effect of improving the business processing efficiency is achieved.

The application provides a network proxy system and method divided by regions, the method divides a server into multiple VPS, acquires proxy server IP of different regions, and stores to a database, further provides an interface, when a calling party accesses a site across regions, through fixed interface parameters, acquires the region number of the calling party accessing the site across regions, extracts any one proxy IP corresponding to the region number of the calling party accessing the site across regions from the database as a forwarding server IP, and assigns the forwarding server to the calling party, so that the calling party forwards messages through the forwarding IP. The system and method support the calling party to report invalid proxy IP to trigger a dialing mechanism, can acquire a new proxy IP, well guarantees the operation stability of the calling party, and can bind a fixed proxy IP for the calling party, so that the calling party can reduce the database query when acquiring the forwarding server again, and reduces the occupation of system resources.

A system comprises a user communication device, a content management server, and a friction free download (FFD) proxy server. The user communication device is configured to send identification information of the user communication device; receive web content in a first web application; send an FFD installation request to the FFD proxy server; download the second web application; and install the second web application during an active session of the first web application. The content management server is configured to send the web content. The FFD proxy server is configured to register the content management server and the user communication device; receive the FFD installation request; authenticate the user communication device during the application session of the first web application; send the second proxy routing information; and send notification information indicating a status of the FFD installation of the second web application.

The invention discloses an intelligent network proxy access system, which comprises a proxy resource layer used for constructing various types of proxy IP pools, storing IP resources in the corresponding proxy IP pools in a classified manner, and performing quality rating processing on the IP resources at the same time; the intelligent scheduling layer is used for synchronizing tasks with an intelligent marketing multi-dimensional model operation platform and a global data acquisition and analysis system in real time and realizing task linkage scheduling; the compliance control layer is used for simulating and avoiding platform rule risks according to the multi-platform agent compliance library in combination with human behaviors; the adaptive docking layer is used for providing a multi-type standardized interface to be docked with the intelligent marketing multi-dimensional model operation platform and the global data acquisition and analysis system; and the monitoring operation and maintenance layer is used for providing a multi-dimensional monitoring board and intelligent alarm and supporting full-link operation and maintenance management. The method has the advantages of high adaptability, high stability, high concurrent support, high compliance, service value increment and the like.

The invention relates to the technical field of computer software testing, in particular to an automatic testing method and device based on dynamic identifier injection, and aims to solve the problems that in the prior art, interface elements are difficult to position, and automatic testing scripts are fragile and high in maintenance cost. The method comprises the following steps: firstly, before webpage source code data returned by a server side is sent to a client side for rendering, obtaining the webpage source code data through a network proxy service or server side middleware; secondly, processing the webpage source code data, adding a unique calibration identifier for a target interface element, establishing a mapping relationship between the calibration identifier and the business logic description of the target interface element, and storing the mapping relationship in a preset calibration standard library; and finally, when an automatic test is executed, obtaining the calibration identifier by querying the mapping relationship, and accurately positioning the target interface element in the interface rendered by the client by using the identifier so as to execute a test operation.

Components of a distributed database may operate faster by maintaining connections to multiple other components. These components may be hosted on various physical computing devices. An application layer communication system comprising a network proxy on each computing device involved in the distributed database may decrease the overall number of connections that are to be established and maintained during operation of the distributed database. The network proxies at sending devices may reduce traffic across the connections by combining packets directed from a particular device to another.

The invention discloses a network access method and system based on a set top box, and the method comprises the steps: a device side generates a target website access instruction, and transmits the target website access instruction to a server side browser through a preset control link; the server browser analyzes the target website access instruction to obtain a target website connection instruction, and sends the target website connection instruction to the device end through a preset network proxy link; the device side establishes connection with a target website according to the target website connection instruction, obtains target website data, and sends the target website data to a server side browser through a preset network proxy link; the server browser extracts target demand data in the target website data according to the target website connection instruction, and sends the target demand data to the device end through a preset control link; and the device side visually displays the target demand data. According to the invention, by constructing the control link and the network agent link, the response speed of the set top box when entering a large website can be effectively improved.

Some aspects of the present technology relate to technologies for performing client testing using network footprint comparison. In accordance with some configurations, a network proxy initiates a client-side network testing process associated with a network and an application where the network proxy intercepts outbound network requests from the application via the network. A network signature of the application is then generated using the outbound network requests and this network signature is compared to a baseline network signature. In accordance with some configurations, comparing the network signature comprises identifying variances in application-requested-inputs associated with the one or more outbound network requests. Based on this comparison, a client-side network test result is generated that can be used to identify variances in the application relative to the baseline network signature.

The invention discloses a DMZ-based unified network proxy service external data access method. The data access method comprises the following steps: determining demand and environment configuration; performing function development and process design; the proxy service is deployed to a corresponding server according to needs, and the service is tested; and entering a system operation stage. The unified network agent mode architecture design improves operation and maintenance monitoring; the security of the system is improved through unified authority and security control; the three-layer network architecture design is better in network isolation.

In one embodiment, a remote access manager receives an access request from a client to remotely access a device on a local network. The remote access manager generates a universally unique identifier for the access request. The remote access manager sends a response to the client having a one-time use domain name system name that is based on the universally unique identifier. The remote access manager communicates with a web proxy to authorize the client to remotely access the device.

The invention relates to a system (1) for controlling a field device (2), wherein the system (1) comprises a server pool (6) comprising servers for operating instances of a virtual control application; the system (1) comprises a network proxy device (23), configured to receive a status update message from the field device (2), comprising status data, and to send replicated status update messages comprising the status data to each instance of the virtual control application assigned to the field device (2); the network proxy device (23) is configured to receive respective control response messages of each of the instances of the virtual control application and to perform a consensus-based decision making procedure to evaluate consensus control data based on the control data provided by the instances of the virtual control application and to send a control response message comprising the consensus control data to the field device (2).

A system, device, and method for implementing secure control over audio visual (AV) equipment connected to an AV gateway is disclosed. The solution implements secure and remote control over audio visual (AV) equipment included in an AV network by enabling a web browser running on a user device to utilize a web proxy shuttle to communicate control commands to an AV gateway that controls the AV equipment.

Approaches to providing endpoint client authentication and application access control in a zero-trust network access (ZTNA) environment are described. A secure session is generated with a secure web proxy based on a request from a browser, wherein the request corresponds to a user and requests access to a server. A secure tunnel is established between the secure web proxy and the browser. A web proxy address corresponding to the user is generated. The user is identified based on a handshake procedure with the secure web proxy. A temporary passcode is generated for the user to be used for access to the server. The temporary passcode is sent to an email address associated with the user. The server is caused to authenticate the user utilizing the temporary passcode to allow the user access to the server if the temporary passcode is approved.

The invention discloses a cross-virtual routing forwarding proxy control method and device and a storage medium, and relates to the technical field of network virtualization and proxy services, and the method comprises the steps: expanding proxy binding instruction grammar of network proxy software according to a preset virtual routing forwarding name parameter, and obtaining a target proxy binding instruction; according to the target agent binding instruction, a structural body of the network agent software is expanded, and an expanded structural body is generated; after a virtual route forwarding name corresponding to the target agent binding instruction is extracted, the virtual route forwarding name is stored in an extended local upstream configuration structural body, and a target local upstream configuration structural body is obtained; and after establishing a function creation socket, binding the socket with a target virtual routing forwarding name instance in the target local upstream configuration structural body to realize a cross-virtual routing forwarding proxy. Through the cross-virtual routing forwarding agent, the problem of poor efficiency of the cross-virtual routing agent is solved, and the implementation process of the cross-virtual routing forwarding agent is optimized.

This application discloses a network proxy method and system with switchable egress IP addresses, including: setting up a VPN server and a VPN client on a user end and a cloud server end, respectively, wherein the VPN server is set up locally on the user end, and the VPN client is deployed on the cloud server end, and the VPN server and the VPN client communicate and connect; the VPN client actively connects back to the VPN server end to determine the VPN client's fixed IP address; and the user uses the network proxy service on the cloud server through the VPN client's fixed IP address. The user connects to the cloud server using the fixed internal IP address assigned to the VPN client by the VPN server end, and can then connect to the network proxy service built on each cloud service through the VPN channel, without having to maintain and frequently change the cloud server's external public network IP address to connect to the network proxy service of each cloud server.

A kind of MAC identification and protocol detection-based Internet of Things equipment unified management method and system, it is related to the field of digital information transmission, in the method, the IP and MAC address of equipment are collected, the supported management protocol and port are detected, and based on MAC address, vendor information is parsed, data is structured into database to generate equipment list;Virtual display service is deployed in server to configure remote desktop instance, graphical browser is called to access equipment management page in the environment without physical display card, and access port is converted through Web proxy;In response to the login instruction of user, remote connection is established through Web port to show management page, and the account and password of matching are automatically extracted and filled, to complete the automatic login of equipment.The present application is used to improve the coherence and overall operation efficiency of unified scheduling of multi-vendor equipment.

The application relates to the technical field of APP detection data processing, and discloses a harmful APP effective core domain name deep detection method, which comprises the following steps: firstly, a sandbox environment is constructed, a network proxy service is constructed in the sandbox environment, and communication traffic information of an APP is comprehensively acquired; then, the APP accesses the Internet through a TUN mode connection gateway in the sandbox test environment; internal operations of the APP are automatically operated, including login, registration and refreshing operations; running analysis is carried out by limiting network bandwidth, delay and packet loss rate parameters; core domain name analysis is carried out, specifically including deep detection of traffic logs; a training model is established according to the traffic logs, the traffic logs are analyzed through the model, a machine learning decision tree algorithm or a data analysis method is used for model analysis, and effective situation data of the APP is confirmed and analyzed. The application constructs an APP communication log analysis model based on a decision tree algorithm, and identifies suspected core domain names based on dimensions such as communication behavior and communication content.

Components of a distributed database may operate faster by maintaining connections to multiple other components. These components may be hosted on various physical computing devices. An application layer communication system comprising a network proxy on each computing device involved in the distributed database may decrease the overall number of connections that are to be established and maintained during operation of the distributed database. The network proxies at sending devices may reduce traffic across the connections by combining packets directed from a particular device to another.

The application discloses a method for realizing TCP secure long connection on a browser, comprising the following steps: building a WebSocket network proxy connection server and providing a WebSocket connection monitoring service, performing security check when receiving a WebSocket connection request, starting to connect the WebSocket to a target service through TCP and forwarding transmission data, tracking the state of each connection and cleaning up when the connection is closed, which has the beneficial effects that a scheme for realizing TCP secure connection on the browser is provided, the demand for directly connecting the server through TCP on the webpage is realized, and compared with the current project status, the secure TCP connection service can be realized without installing the client by the user; the method provided by the application is completely based on the underlying network protocol transmission, can realize the maximum compatibility, the minimum change and the most convenient maintenance.

A web crawler system that crawls Internet articles and provides a summary service of issue articles affecting GVC includes a user terminal provided with a web agent that crawls and collects English issue articles of overseas media outlets, searches keywords, and displays a summary of overseas media issue articles; and an overseas issue article summary web crawler system that crawls English issue articles of the overseas media by the web agent to store multiple news article lists / articles classified by article titles in a DB, after sentence classification (SC) on the issue articles, selects sentences containing or related to key words of an item of interest in the issue articles, extracts words from each sentence, and provides a summary of overseas media issue articles that affect global value chain (GVC).

Examples of systems and methods for network proxy server for energy efficient video streaming on mobile devices are generally described herein. A proxy server to deliver video content may include a communication module to intercept a request for video content from a mobile device, the request for video content intended for a content server and forward a modified request for the video content to the content server. The communication module may receive the video content from the content server and transfer a portion of the video content to the mobile device using a multipath transport protocol.

The embodiment of the specification discloses a kind of construction methods, device and equipment of browser front-end tool chain, it is related to artificial intelligence technical field, for solving the problem of existing construction poor performance.For the construction system executed in browser environment, comprising: based on the front-end editing module running in browser main thread, receiving the construction instruction of user;Through front-end editing module, the construction task corresponding to the construction instruction is sent to background building module, to execute the construction task by background building module, generates construction product;Through background building module and front-end editing module, construction product is written into browser local storage space;Through network proxy module, the resource request initiated by preview framework is intercepted, to obtain corresponding construction product from the browser cache space in browser local storage space, and send to preview framework for rendering.

The present application provides a cross-cluster application access method, a gateway apparatus, and a related product, capable of realizing communication between cross-cluster applications and reducing the resource occupation of a network proxy component in a cluster. The method is applied to a multi-cluster system, the multi-cluster system comprises an application layer gateway, a first K8s cluster and a second K8s cluster, the first K8s cluster comprises a network proxy component and a first application, and the second K8s cluster comprises a second application. Specifically, the network proxy component intercepts an access request sent by the first application, and forwards the access request on the basis of a routing rule matching the request. When the routing rule instructs to perform application layer processing on the access request, the access request is sent to the application layer gateway, so that the application layer gateway performs application layer processing on the access request, and forwards the processed access request to the second application. When the routing rule instructs to perform transport layer processing on the access request, the access request is sent to the second application.

This application relates to the field of signal transmission technology and provides an API interface vulnerability analysis method and apparatus, terminal device, and storage medium. The API interface vulnerability analysis method includes: firstly, obtaining at least one application installation package; determining the application corresponding to each application installation package; performing static analysis on the application to obtain multiple running components corresponding to the application; driving a webpage to connect to and launch the application; for each application, setting up a web proxy and installing a digital root certificate on the webpage; obtaining log files generated by the multiple running components of each application through the webpage; and determining the vulnerability information of the API interface corresponding to the application based on the log files. Through the above solution, this application solves the technical problem that existing API interface vulnerability mining methods can cause risks to APP operation.

A method for scheming a model for detecting SSH communication according to an embodiment includes collecting a training dataset including a plurality of network session logs from a web proxy, generating a plurality of preprocessed log information based on a plurality of original datasets included in each of the plurality of network session logs, training, in a first algorithm-based first initial model and a second algorithm-based second initial model for detecting a log corresponding to SSH communication from network session logs, the first initial model and the second initial model based on the plurality of preprocessed log information, and using a new dataset as input to the trained first initial model and the trained second initial model and scheming a final model based on a detection result of the trained first initial model and a detection result of the trained second initial model.

The present invention relates to an asset detection method based on multi-node collaboration, belonging to the field of network security. The method of the present invention reasonably schedules the IP address resource pool, proxy resource pool, and engine resource pool, and conducts detections on each port and service of the detection target using different IP addresses, different network proxies, and different engines, so as to prevent the detection execution unit from being pulled into the blacklist due to triggering the asset security protection mechanism and ensure the effectiveness of the detection results. Multiple nodes are used to jointly detect each port and service of the detection target, and multiple results are output for the detection of the same asset and the same port / service. Algorithms such as decision trees are used for auxiliary decision-making to improve the accuracy of asset detection. Through multi-node collaborative detection, the present invention solves problems such as the asset detection not considering the avoidance of security protection mechanisms and the inaccurate detection results of assets with high security protection mechanisms, and effectively improves the accuracy of asset detection for high-security protection nodes.