BR112014006261B1 - Método para impedir a manipulação de página da web e aparelho para impedir a manipulação de página web de pagamento - Google Patents

Método para impedir a manipulação de página da web e aparelho para impedir a manipulação de página web de pagamento Download PDF

Info

Publication number
BR112014006261B1
BR112014006261B1 BR112014006261-7A BR112014006261A BR112014006261B1 BR 112014006261 B1 BR112014006261 B1 BR 112014006261B1 BR 112014006261 A BR112014006261 A BR 112014006261A BR 112014006261 B1 BR112014006261 B1 BR 112014006261B1
Authority
BR
Brazil
Prior art keywords
interface
request
browser
web page
function
Prior art date
Application number
BR112014006261-7A
Other languages
English (en)
Portuguese (pt)
Other versions
BR112014006261A2 (pt
Inventor
Jie Lin
Wusan Ban
Qiyuan Meng
Original Assignee
Tencent Technology (Shenzhen) Company Limited
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Tencent Technology (Shenzhen) Company Limited filed Critical Tencent Technology (Shenzhen) Company Limited
Publication of BR112014006261A2 publication Critical patent/BR112014006261A2/pt
Publication of BR112014006261B1 publication Critical patent/BR112014006261B1/pt

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/1466—Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
    • G06F21/566—Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/606—Protecting data by securing the transmission between two devices or processes
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • G06F21/6245—Protecting personal data, e.g. for financial or medical purposes
    • G06F21/6263—Protecting personal data, e.g. for financial or medical purposes during internet communication, e.g. revealing personal data from cookies
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/629—Protecting access to data via a platform, e.g. using keys or access control rules to features or functions of an application

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Software Systems (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Health & Medical Sciences (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • General Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • Virology (AREA)
  • Medical Informatics (AREA)
  • Databases & Information Systems (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Computing Systems (AREA)
  • Storage Device Security (AREA)
  • Information Transfer Between Computers (AREA)
BR112014006261-7A 2011-09-16 2012-09-14 Método para impedir a manipulação de página da web e aparelho para impedir a manipulação de página web de pagamento BR112014006261B1 (pt)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
CN201110277604.7 2011-09-16
CN201110277604.7A CN102999718B (zh) 2011-09-16 2011-09-16 一种支付网页防修改方法和装置
PCT/CN2012/081385 WO2013037304A1 (en) 2011-09-16 2012-09-14 Apparatus and methods for preventing payment webpage tampering

Publications (2)

Publication Number Publication Date
BR112014006261A2 BR112014006261A2 (pt) 2017-04-11
BR112014006261B1 true BR112014006261B1 (pt) 2021-07-13

Family

ID=47882623

Family Applications (1)

Application Number Title Priority Date Filing Date
BR112014006261-7A BR112014006261B1 (pt) 2011-09-16 2012-09-14 Método para impedir a manipulação de página da web e aparelho para impedir a manipulação de página web de pagamento

Country Status (6)

Country Link
US (1) US20140359770A1 (enExample)
EP (1) EP2756441B1 (enExample)
CN (1) CN102999718B (enExample)
BR (1) BR112014006261B1 (enExample)
IN (1) IN2014CN02573A (enExample)
WO (1) WO2013037304A1 (enExample)

Families Citing this family (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103942490B (zh) * 2013-01-17 2017-04-19 珠海市君天电子科技有限公司 一种防止网页内容被篡改的方法及其装置
US9438610B2 (en) * 2013-09-03 2016-09-06 Pagefair Limited Anti-tampering server
CN103605924B (zh) * 2013-11-28 2016-08-24 北京奇虎科技有限公司 一种防止恶意程序攻击网络支付页面的方法及装置
CN103646211A (zh) * 2013-12-05 2014-03-19 北京奇虎科技有限公司 浏览器中加载支付类网页的方法与装置
CN104778166B (zh) * 2014-01-09 2018-02-13 腾讯科技（深圳）有限公司 页面安全标识显示方法、装置和网络系统
US10097583B1 (en) * 2014-03-28 2018-10-09 Amazon Technologies, Inc. Non-blocking automated agent detection
US9361446B1 (en) 2014-03-28 2016-06-07 Amazon Technologies, Inc. Token based automated agent detection
US9424414B1 (en) 2014-03-28 2016-08-23 Amazon Technologies, Inc. Inactive non-blocking automated agent detection
CN104021467A (zh) * 2014-06-12 2014-09-03 北京奇虎科技有限公司 保护移动终端支付安全的方法和装置以及移动终端
CN107295177B (zh) * 2017-06-27 2020-01-24 Oppo广东移动通信有限公司 应用禁用方法、装置及终端设备
CN110011964B (zh) * 2019-02-27 2021-09-24 同盾控股有限公司 一种网页环境检测方法和装置
CN109951490A (zh) * 2019-03-27 2019-06-28 远光软件股份有限公司 基于区块链的网页防篡改方法、系统及电子设备
GB2598412A (en) * 2020-08-18 2022-03-02 Clario Tech Ltd A method for detecting a web skimmer on a "payment page"
US12373174B2 (en) * 2022-08-16 2025-07-29 Lenovo (Singapore) Pte. Ltd. Identification of callback from 2D app to render 3D model using 3D app

Family Cites Families (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8161548B1 (en) * 2005-08-15 2012-04-17 Trend Micro, Inc. Malware detection using pattern classification
CN100571276C (zh) * 2006-09-28 2009-12-16 北京理工大学 一种基于行为特征的网页木马检测方法
US8015174B2 (en) * 2007-02-28 2011-09-06 Websense, Inc. System and method of controlling access to the internet
US9092823B2 (en) * 2007-06-01 2015-07-28 F-Secure Oyj Internet fraud prevention
CN101409719B (zh) * 2007-10-08 2013-06-05 联想(北京)有限公司 实现网络安全支付的方法及客户端
CN101626368A (zh) * 2008-07-11 2010-01-13 中联绿盟信息技术(北京)有限公司 一种防止网页被篡改的设备、方法和系统
CN101778137A (zh) * 2010-01-15 2010-07-14 蓝盾信息安全技术股份有限公司 一种防止网页被篡改的系统及方法
CN102034043B (zh) * 2010-12-13 2012-12-05 四川大学 基于文件静态结构属性的恶意软件检测新方法

Also Published As

Publication number Publication date
US20140359770A1 (en) 2014-12-04
IN2014CN02573A (enExample) 2015-08-07
CN102999718A (zh) 2013-03-27
EP2756441A1 (en) 2014-07-23
CN102999718B (zh) 2015-07-29
EP2756441A4 (en) 2015-04-29
EP2756441B1 (en) 2017-03-01
WO2013037304A1 (en) 2013-03-21
BR112014006261A2 (pt) 2017-04-11

Similar Documents

Publication Publication Date Title
EP2756441B1 (en) Apparatus and methods for preventing payment webpage tampering
US8332654B2 (en) Secure framework for invoking server-side APIs using AJAX
JP6176622B2 (ja) マルウェアの検出方法
RU2610254C2 (ru) Система и способ определения измененных веб-страниц
US20130061323A1 (en) System and method for protecting against malware utilizing key loggers
US8539578B1 (en) Systems and methods for defending a shellcode attack
JP6223458B2 (ja) アプリケーションが悪意のあるものであるかどうかを識別するための方法、処理システム、およびコンピュータ・プログラム
US8347380B1 (en) Protecting users from accidentally disclosing personal information in an insecure environment
US20100083383A1 (en) Phishing shield
EP3835984B1 (en) Detecting compromised web pages in a runtime environment
US9208235B1 (en) Systems and methods for profiling web applications
JP7562834B2 (ja) ウェブサイト上の誤った方向に導くクリックから保護するためのシステム及び方法
WO2016058489A1 (zh) 一种用于提供访问页面的方法与设备
US10936714B1 (en) Systems and methods for preventing code insertion attacks
US10397250B1 (en) Methods for detecting remote access trojan malware and devices thereof
US20170161525A1 (en) Keyboard monitoring to protect confidential data
CN111177727B (zh) 漏洞检测方法及装置
US11736512B1 (en) Methods for automatically preventing data exfiltration and devices thereof
Kim et al. Extending a hand to attackers: browser privilege escalation attacks via extensions
US9021596B2 (en) Correcting workflow security vulnerabilities via static analysis and virtual patching
US8959647B2 (en) Runtime security and exception handler protection
US11003746B1 (en) Systems and methods for preventing electronic form data from being electronically transmitted to untrusted domains
US20250337751A1 (en) Scripting attack detection and mitigation using content security policy violation reports
US20200327229A1 (en) Method, apparatus, electronic device and storage medium for protecting private key of digital wallet
CN106301974A (zh) 一种网站后门检测方法和装置

Legal Events

Date Code Title Description
B06F Objections, documents and/or translations needed after an examination request according [chapter 6.6 patent gazette]
B06U Preliminary requirement: requests with searches performed by other patent offices: procedure suspended [chapter 6.21 patent gazette]
B09A Decision: intention to grant [chapter 9.1 patent gazette]
B16A Patent or certificate of addition of invention granted [chapter 16.1 patent gazette]

Free format text: PRAZO DE VALIDADE: 20 (VINTE) ANOS CONTADOS A PARTIR DE 14/09/2012, OBSERVADAS AS CONDICOES LEGAIS.