Malicious attack prevention method and browser

Abstract

The invention discloses a malicious attack prevention method and a browser, and relates to the technical field of Internet. The browser comprises malicious attack prevention equipment, wherein the malicious attack prevention equipment comprises an acquisition unit, a checking unit, an adding unit and a storage unit; the acquisition unit is suitable for acquiring Cookie generated by a server when a user logs into a website and sending the Cookie to the checking unit; the checking unit is used for checking whether an attribute for preventing a malicious attack is selected in the Cookie, and if the attribute for preventing the malicious attack is not selected in the Cookie, sending the Cookie to the adding unit; the adding unit is used for adding the attribute for preventing the malicious attack into the Cookie and sending the Cookie to the storage unit; and the storage unit is used for storing the received Cookie. By the technical scheme, the malicious attack launched by using the Cookie can be prevented on the browser side; and therefore, the problem that the user security is threatened because information in the user Cookie is probably stolen or modified when the server of the website accessed by the user is low in security relative to cross-site scripting is solved.

Description

technical field [0001] The invention relates to the technical field of the Internet, in particular to a malicious attack prevention method and a browser. Background technique [0002] Cross-site scripting (Cross-sitescripting, often abbreviated as XSS) occurs on the client side and can be used to steal privacy, phishing, steal passwords, and spread malicious codes. Malicious attackers put codes that are harmful to the client on the server as a webpage content, so that when other website users watch this webpage, these codes are injected into the user's browser for execution, and the user is attacked. Generally speaking, with cross-site scripting attacks, attackers can steal session cookies to steal the privacy of website users, including passwords. [0003] Cookie refers to the data stored on the user's local terminal by some websites in order to identify the user's identity and conduct session tracking, and is usually encrypted. The cookie is generated by the server and s...

AI Technical Summary

Problems solved by technology

[0005] However, XSS can steal the user's cookie, so as to use the cookie to steal the user's operation authority to the website

If a webmaster user's cookie is stolen, it will cause great harm to the website

Images