Method for automatically positioning webpage Trojan mount point in Trojan linked webpage

Abstract

The invention discloses a method for automatically positioning webpage Trojan mount point in a Trojan linked webpage and belongs to the field of computer security. The method comprises the following steps of: a) determining the Trojan linking webpage; b) acquiring a style sheet in the Trojan linked webpage, and performing script analysis on the scripts therein according to a step c); c) acquiringthe scripts in the Trojan linked webpage, outputting the positions of malicious scripts in a father webpage, wherein the malicious characteristics comprise: calling the objects of known bugs, containing malicious codes, opening malicious webpages, redirecting to the malicious webpages, and adding malicious webpages; and d) acquiring an embedded webpage in the Trojan linked webpage, comparing whether the website domain name is the same as the Trojan linked webpage for the embedded webpage determined to be subjected to Trojan linkage, if so, performing recursive analysis, otherwise, outputting the position of an embedded label in the father webpage. The method can be applied to the computer security, and comprises rapidly positioning the mount position of the webpage Trojan in the webpage to assist the website management personnel to rapidly remove the malicious contents contained in the webpage.

Description

technical field [0001] The invention belongs to the field of computer security, and relates to an automatic analysis technology of a web page Trojan horse based on the analysis of the internal structure of a web page, and proposes a method for automatically identifying and locating a web page Trojan horse attachment point by utilizing the technical characteristics of a web page Trojan horse attachment. Background technique [0002] At present, web browsing has become an important way to spread malicious programs. The means of dissemination of webpage Trojan horses has changed from the previous method of deceiving users to download and install them to attacking security holes in the system and automatically downloading and installing Trojan horse programs. More and more browser and browser plug-in vulnerabilities have been discovered, such as Microsoft's MS06-014, MS08-078, MS09-002, MS09-028 vulnerabilities, Adobe Flash and Acrobat Reader vulnerabilities, etc. Common vulnera...

AI Technical Summary

Problems solved by technology

However, Trojan horses on the website not only pose a threat to users, but also seriously affect the reputation of the website and the interests of website operators. Therefore, website managers need to always pay attention to the security of web pages in the website. The location where it is hung, eliminating the harm caused by hanging horses on web pages