Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

JS sensitive information leakage detection method and device, equipment and medium

A sensitive information, leak detection technology, applied in the direction of using information identifiers to retrieve web data, computer security devices, network data retrieval, etc., can solve problems such as low detection efficiency

Active Publication Date: 2021-02-09
福建有度网络安全技术有限公司
View PDF7 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0007] Aiming at the deficiencies of the prior art, the present invention provides a JS sensitive information leakage detection method, device, equipment and medium, which has the advantages of fast detection speed and solves the problem of low detection efficiency

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • JS sensitive information leakage detection method and device, equipment and medium
  • JS sensitive information leakage detection method and device, equipment and medium
  • JS sensitive information leakage detection method and device, equipment and medium

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0035] The technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the embodiments of the present invention. Obviously, the described embodiments are only some of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

[0036] Such as figure 1 As shown, a JS sensitive information leakage detection method includes the following steps:

[0037] 1) Obtain the URL of the website to be detected;

[0038] During specific implementation, URLs are acquired in batches.

[0039] 2) By focusing on the web crawler to search the URL, focus on the JS file, and grab the JS file;

[0040] In the specific implementation, by focusing on the web crawler to search for the URL, and selectively crawling those p...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention relates to the technical field of JS sensitive information, and discloses a JS sensitive information leakage detection method and device, equipment and a medium, and the method comprisesthe following steps: 1) obtaining a URL of a to-be-detected website; 2) searching the URL through a focusing web crawler, focusing the JS file, and capturing the JS file; and 3) extracting a sensitive information source by using an incremental crawler technology, establishing a data dictionary according to the existing sensitive information source standard, and discharging inspection-free information. The invention has the advantages that by extracting. Html,. Do and. Action keywords in JS file source codes and scanning the key words mainly containing the sensitive information, some words irrelevant to the sensitive information can be bypassed, so that the detection speed is increased, the resource occupation is reduced, and the detection efficiency is improved. For. Html,. Do and. Actionkeywords without sensitive information, other source codes of the JS file corresponding to the. Html,. Do and. Action keywords are imported into the data dictionary for secondary scanning, the comprehensiveness and accuracy of sensitive information leakage detection are improved, and meanwhile the detection efficiency is improved.

Description

technical field [0001] The invention relates to the technical field of JS sensitive information, in particular to a JS sensitive information leakage detection method, device, equipment and medium. Background technique [0002] As a fairly simple but powerful client-side scripting language, JavaScript is essentially an interpreted language. Therefore, its execution principle is to run while explaining. The above characteristics determine that JavaScript is different from some server scripting languages ​​(such as ASP, PHP) and compiled languages ​​(such as C, C++), and its source code can be easily obtained by anyone. Some careless developers store all kinds of sensitive information in JavaScript scripts. Due to the characteristics of JS, attackers can view the information at a glance, thus causing varying degrees of threats to WEB services and user privacy. [0003] The current detection method also has the following problems: [0004] The current detection method still n...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): G06F16/951G06F16/955G06F21/55G06K9/62
CPCG06F16/951G06F16/955G06F21/554G06F18/28
Inventor 陈超张梦林
Owner 福建有度网络安全技术有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com