Webpage tampering detecting method and device

Abstract

The invention discloses a webpage tampering detecting method. The method comprises the steps that a proxy server obtains response webpages aiming at an access request; the proxy server inserts tempered detection scripts in the webpages; the webpages are sent to a client-side browser sending out the access request; the browser executes the tampered detection scripts and detects whether the webpages are tampered or not; the webpages are reported to a detection server if the webpages are tampered. According to the technical scheme, the webpage tempering detecting method solves the problem that in the prior art, efficiency is low due to the fact that a uniform webpage tampering detection server detects in a centralized mode, and the flexibility problem caused by the reason that tampered detection scripts need inserting into each webpage respectively, and greatly improves webpage safety on the condition of not influencing a user to access the webpages.

Description

technical field [0001] The invention relates to the field of computer website security, in particular to a method and device for detecting webpage tampering. Background technique [0002] With the rapid development of the Internet, the number of websites on the Internet is also increasing. Many websites are representations of entities and organizations on the Internet. And some organizations or individuals with bad intentions scan the server for weak passwords and loopholes, and then attack the website and maliciously tamper with it. [0003] Although there are security measures such as firewalls and intrusion detection, the complexity and diversity of modern operating systems lead to endless system vulnerabilities, which are hard to prevent. Hacking and tampering with pages happens from time to time. Aiming at this, the anti-tampering system of web pages came into being. For example, attaching malicious links to web pages, such as black links, links linked to horses, et...

AI Technical Summary

Problems solved by technology

The tampering feature rules are usually represented by regular expressions, and using regular expressions to match webpage content is time-consuming, inefficient, and poor in real-time

At present, web page tampering methods emerge in endlessly and change day by day, and the tampering feature rules in the tampering feature rule library will also increase accordingly, which means that each detection will consume a lot of resources, and the user experience is not good, resulting in the decline of user expectations for the website , for some commercial sites, this will be fatal

Images