Method and system for detecting third-party code calling of web application

Abstract

The invention discloses a method and system for detecting calling of a third-party code of a web application. The method comprises the steps: 1), generating an agent package based on a Javagent structure, and enabling the agent package to comprise a class file recognition program and a monitoring program; 2) before the web application is started, adding the agent program package into the JVM parameters, and inserting the monitoring program into an entry method of a web server processing request; 3) starting the web application, and acquiring all class files required to be called by the web application through an Instrumentation interface on the JVM by the class file recognition program; 4) obtaining a third-party library of the web application; (5) comparing all the called class files obtained in the step (3) with the jar files in the third-party library obtained in the step (4) so as to identify third-party class files called by the web application; all the class file data needing tobe called of the web application obtained through the detection method are based on the web application, and therefore the accuracy of the data is effectively guaranteed.

Description

technical field [0001] The invention relates to the technical field of web application code detection, in particular to a method and system for detecting third-party code calls of web applications. Background technique [0002] Web applications are applications based on the browser / server model (also known as B / S architecture). The browser is responsible for displaying data from the server and accepting user input data, also known as "interacting with the user"; the server is responsible for processing the browser's access request and organizing the processing results (data or messages) into a format that the browser can recognize text returned. Web applications generally consist of Java classes, configuration files, static resources, and third-party libraries. When building a project, class files of multiple third-party libraries are introduced to implement various functions, such as unit testing, log management and file operations all require third-party libraries. Thir...

AI Technical Summary

Problems solved by technology

After the development of the web application is completed, whether it is later maintenance or adding functions, it is necessary to know which third-party application files will be called by the web application during the startup process. However, no web application has been developed in the prior art. Such a detection program brings inconvenience to the later maintenance and development programmers

Images