A method for identifying the security of website login password data transmission

Abstract

The method for identifying the security of website login password data transmission of the present invention is realized by the following steps: a). Obtain the Request request that includes user name and password; b). Analyze the password generation type; c). Analyze whether the login website belongs to HTTP or HTTPS protocol. The method for identifying the security of website login password data transmission of the present invention is to comprehensively determine by judging whether the password to log in to the website is transmitted in plain text, encoded or encrypted, or based on a variable-based password generation algorithm, and combined with the transmission protocol of the website The security of the password entered by the user during data transmission can help the user obtain a very intuitive and easy-to-understand security performance of the website password at the data transmission level, gain a deeper understanding of the possible security risks of the website, and remind the user what is there when logging in Websites with very poor security levels improve the security of user accounts.

Description

technical field [0001] The present invention relates to a method for identifying the security of website login password data transmission, more specifically, to a method for identifying the security of website login password data transmission that can analyze and judge the generation method of login password and the type of website data transmission protocol . Background technique [0002] With the prosperity and development of the Internet, more and more service providers adopt the CS architecture (server-client, that is, Client-Server structure), and place the functional modules on their own servers, while the client access software only needs a browser to Enough to use, this architecture makes service provider maintenance and updates simpler and more efficient. The simplest and most common way to access the service module based on the browser is to use the website registration and login method, and determine whether the user is a trusted user and what level of authority ...

AI Technical Summary

Problems solved by technology

[0005] However, in actual applications, the websites to log in vary greatly. Many websites still use encryption methods that are not very secure, and even do not encrypt or only perform simple encoding processing on login passwords. When using these websites to log in, even if the generated strength No matter how high or complex the password is, it is easy to be captured during the data transmission process of the password, so as to obtain the user's login credentials, resulting in the leakage of account information, which in turn endangers the user's personal privacy and even property security.

Images