CN103634359B - A kind of proxy server identification method and device - Google Patents
A kind of proxy server identification method and device Download PDFInfo
- Publication number
- CN103634359B CN103634359B CN201210309017.6A CN201210309017A CN103634359B CN 103634359 B CN103634359 B CN 103634359B CN 201210309017 A CN201210309017 A CN 201210309017A CN 103634359 B CN103634359 B CN 103634359B
- Authority
- CN
- China
- Prior art keywords
- http
- server
- message
- user
- difference
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Abstract
This application discloses a kind of proxy server identifying device, including：HTTP message transmitter, for receive when server user GET request when, generate and return a HTTP message carrying control instruction, described control instruction be used for instruction receive this HTTP message browser return a corresponding response message to server；Detector, for judging for the HTTP message issuing same user, server receives TCP ACK and confirms required time and whether receive the difference of the length of described corresponding response message required time more than a predetermined threshold, if it is judges that this user employs proxy server；The application can recognize that whether user employs proxy server.
Description
Technical field
The application is related to internet arena, more particularly, to a kind of proxy server identification method and device.
Background technology
One kind is existed at present on the Internet it is widely applied and mutually look into technology as IP address and geographical position, this technology is extensive
It is applied to the Internet every field, especially risk control field, uses as strong risks and assumptions, it is led in risk control
Domain scheme application principle is whether one user of detection logs in different geographical position, if it is, can recognize in the short time
For being an excessive risk operation.This judges it is to be that real IP is just set up based on the IP of user.But proxy server technology is beaten
Break the premise of this application.That is a Pekinese user then can be serviced by the proxy server in Hangzhou completely
The IP address that device is seen is the address of Hangzhou proxy server.
The problem how distinguishing proxy server in the industry cycle discusses always, and industry also has the solution party of such problems many
Case, but mainly still concentrate on both direction：
1st, the collection in proxy server storehouse, is had and is captured from the Internet based on reptile, also generation based on active scan
Reason server is collected.
In such solution, for the mode capturing from the Internet based on reptile, a lot of proxy servers are had to be not
Announce on the internet, or some meat machines that hacker controls, this information is very incomplete；It is directed to active scan
Mode, interconnection active online main frame amount is very huge, and the serve port of proxy server is not fixed, so scheme scanning week
Phase is very long, and cost performance is excessively poor.
2nd, the identification based on proxy server feature, for example, the message that sends of regular proxy server in HTTP head all
There is the fields such as Via, X-Forwarded-for.
It is effective that such solution is directed to regular proxy server software, but a lot of proxy server software
Can configure and be not added with this field, the method is very unreliable.
Content of the invention
The application technical problem to be solved is how to identify whether user employs proxy server.
In order to solve the above problems, this application provides a kind of proxy server identifying device, including：
HTTP message transmitter, for receive when server user GET request when, generate and return one and carry control
The HTTP message of instruction, described control instruction is used for browser one corresponding response of return that instruction receives this HTTP message
Message is to server；
Detector, for judging for the HTTP message issuing same user, server receives TCP ACK and confirms to be taken
Between and receive described corresponding response message required time length difference whether more than a predetermined threshold, if it is judging should
User employs proxy server.
Further, described control instruction is js code, and described corresponding response message is asked for ajax.
Further, server time stamp and signing messages, institute are also carried in the described HTTP message carrying control instruction
State and in corresponding response message, comprise this server time stamp and signing messages.
Further, described detector includes：
TCP time detector, corresponding to receiving this HTTP message from being sent to a user for calculating a HTTP message
Time difference between TCP ACK confirmation, obtains the TCP time difference of this user；
HTTP time detector, for carrying the HTTP message of control instruction described in calculating from being sent to a user to receiving
Time difference between corresponding response message, obtains the HTTP time difference of this user；
Comparator, for calculating the difference between the TCP time difference of a user and HTTP time difference, if this difference is exhausted
To value more than a predetermined threshold, then judge that this client employs proxy server.
Further, detector judges for the HTTP message issuing same user, and server receives TCPACK and confirms institute
Whether the difference taking time and receiving the length of described corresponding response message required time refers to more than a predetermined threshold：
After server sends the HTTP message carrying control instruction described in, record receives this HTTP to described detector
Moment and the moment receiving the corresponding response message of this HTTP message that message corresponding TCP ACK confirms；Judge this two
Whether the interval time lengths in moment are more than a predetermined threshold.
Present invention also provides a kind of proxy server identification method, including：
When server receives the GET request of user, generate and return a HTTP message carrying control instruction, described
Control instruction is used for instruction and receives browser one corresponding response message of return of this HTTP message to server；
Judge for the HTTP message issuing same user, server receives TCP ACK and confirms required time and receive institute
The difference of length stating corresponding response message required time, whether more than a predetermined threshold, if it is judges that this user employs
Proxy server.
Further, described control instruction is js code, and described corresponding response message is asked for ajax.
Further, server time stamp and signing messages, institute are also carried in the described HTTP message carrying control instruction
State and in corresponding response message, comprise this server time stamp and signing messages.
Further, for the HTTP message issuing same user, it is required that server receives TCPACK confirmation for described judgement
Whether the difference of time and the length receiving described corresponding response message required time includes more than the step of a predetermined threshold：
Calculate a HTTP message from be sent to a user to receive this HTTP message corresponding TCP ACK confirm when
Between poor, obtain the TCP time difference of this user；
The HTTP message of control instruction is carried from being sent to a user to receiving corresponding response message described in calculating
Time difference, obtain the HTTP time difference of this user；
Calculate the difference between the TCP time difference of a user and HTTP time difference, judge whether the absolute value of this difference surpasses
Cross a predetermined threshold.
Further, for the HTTP message issuing same user, it is required that server receives TCP ACK confirmation for described judgement
Whether the difference of time and the length receiving described corresponding response message required time includes more than the step of a predetermined threshold：
After server sends the HTTP message carrying control instruction described in, it is corresponding that record receives this HTTP message
Moment and the moment receiving the corresponding response message of this HTTP message that TCP ACK confirms；Judge the interval in this two moment
Whether time span is more than a predetermined threshold.
The time difference that the technical scheme of the application utilizes TCP ACK to confirm and the ajax request of browser feedback between, comes
Judge whether user employs proxy server, reliability is high, and without additionally carrying out the collection in proxy server storehouse.
Brief description
Fig. 1 is one of communication process schematic diagram in embodiment one；
Fig. 2 is two of communication process schematic diagram in embodiment one；
Fig. 3 is the schematic flow sheet of example in embodiment two.
Specific embodiment
Below in conjunction with drawings and Examples, the technical scheme of the application is described in detail.
If it should be noted that not conflicting, each feature in the embodiment of the present application and embodiment can mutually be tied
Close, all within the protection domain of the application.In addition, though showing logical order in flow charts, but in some situations
Under, can be with the step shown or described different from order execution herein.
Embodiment one, a kind of proxy server identifying device, including：
HTTP (HTTP) message transmitter, for receive when server user GET request when, generate simultaneously
Return a HTTP message carrying control instruction, described control instruction is used for indicating that the browser receiving this HTTP message returns
Return a corresponding response message to server；
Detector, for judging for the HTTP message issuing same user, server receives TCP (transmission control protocol)
ACK (acknowledgement indicator in Acknowledgement, TCP stem) confirms required time and receives described corresponding response message
The difference of the length of required time, whether more than a predetermined threshold, if it is judges that this user employs proxy server.
In the present embodiment, described control instruction can be, but not limited to as a kind of js (JavaScript, script) code,
Described corresponding response message can be, but not limited to ask for ajax；This is principle HTTP document being parsed using browser,
After the browser of client receives described js code, this js code can be executed, return ajax (Asynchronous
JavaScript and XML, asynchronous JavaScript and extensible markup language) ask to server.Also may be used during practical application
Can control the instruction of browser using other.
In the present embodiment, server time stamp in the described HTTP message carrying control instruction, can also be carried, described right
This server time stamp is comprised in the response message answered.
The signing messages of server, institute in the present embodiment, can also be carried in the described HTTP message carrying control instruction
State and in corresponding response message, comprise this signing messages.
In the present embodiment, described predetermined threshold can based on experience value or test value determine, and can according to judge needed for
Fineness is sized；Such as, when merely desiring to identify trans-regional proxy server, (actual customer end is with proxy server not
In same area) when, it is relatively large that this predetermined threshold can be arranged, and can be, but not limited to the TCP time difference for a times；When
When wanting to identify the proxy server with area, then can be less by the setting of described predetermined threshold.
In an embodiment of the present embodiment, described detection implement body can include：
TCP time detector, corresponding to receiving this HTTP message from being sent to a user for calculating a HTTP message
Time difference between TCP ACK confirmation, obtains the TCP time difference of this user, that is, receive TCP ACK and confirm required time；
HTTP time detector, for carrying the HTTP message of control instruction described in calculating from being sent to a user to receiving
Time difference between corresponding response message, obtains the HTTP time difference of this user, that is, receive corresponding response message and taken
Between；
Comparator, for calculating the difference between the TCP time difference of a user and HTTP time difference, if this difference is exhausted
To value more than a predetermined threshold, then judge that this client employs proxy server.
In this enforcement, the described HTTP message carrying control instruction can be somebody's turn to do with facilitating to follow the tracks of using special HTTP head
HTTP message and its corresponding TCP ACK confirmation/response message.
In the present embodiment, TCP time detector and HTTP time detector can be same HTTP message is carried out with
Track, obtains described TCP time difference and HTTP time difference respectively；Respectively different HTTP message can also be tracked, to obtain
Obtain described TCP time difference and HTTP time difference.
In the another embodiment of the present embodiment, detector judges, for the HTTP message issuing same user, to service
Device receives TCP ACK and confirms required time and whether receive the difference of the length of described corresponding response message required time more than one
Predetermined threshold specifically may refer to：
After server sends the HTTP message carrying control instruction described in, record receives this HTTP to described detector
Moment and the moment receiving the corresponding response message of this HTTP message that message corresponding TCP ACK confirms；Judge this two
Whether the interval time lengths in moment are more than a predetermined threshold.
Explain the realization mechanism of the present embodiment below with two specific communication process.
Between client and server direct-connected when, its communication process as shown in figure 1, include：
Client sends TCP SYN to server；
Server returns TCP SYN+ACK to client；
Client sends TCP ACK to server, wherein may carry GET request；
For GET request, server sends http response message to client, wherein carry js code, signing messages and
Server time stabs；
Client returns TCP ACK after receiving described http response message and confirms to server；The browser solution of client
When analysing described http response message, execute described js code, generate the ajax comprising described signing messages server timestamp
Request returns to server；This ajax request is carried in during above-mentioned TCP ACK confirms it is also possible to independent send.
In said process, TCP time difference sends http response message for server and confirms to the TCP ACK receiving client
Between time difference；HTTP time difference sends http response message for server and is returned according to server to receiving client browser
Time difference between the ajax request that the js returning is constructed；As can be seen that the size of two time differences is more or less the same each other.
When passing through trans-regional proxy server between client and server and connecting, its communication process as shown in Fig. 2
Including (explanations are omitted hering handshake procedure)：
Client sends GET request to proxy server, and proxy server returns TCP ACK to client, and sends GET
Ask to server；
Server sends http response message to proxy server, when wherein carrying js code, signing messages and server
Between stab；
Proxy server is transmitted to client after receiving described http response message, and returns TCP ACK and confirm to service
Device；
Described in the browser resolves of client during http response message, execute described js code, send and include described label
The ajax of name information server timestamp asks to proxy server；
Proxy server is transmitted to server after receiving described ajax request, and returns TCP ACK to client.
In said process, TCP time difference sends http response message to the TCP ACK receiving proxy server for server
Time difference between confirmation；HTTP time difference for server send http response message to receive proxy server forwarding true
Time difference between the ajax request that client browser is constructed according to the js code that server returns；As can be seen that two
The size difference of time difference is larger.
Embodiment two, a kind of proxy server identification method, including：
When server receives the GET request of user, generate and return a HTTP message carrying control instruction, described
Control instruction is used for instruction and receives browser one corresponding response message of return of this HTTP message to server；
Judge for the HTTP message issuing same user, server receives TCP ACK and confirms required time and receive institute
The difference of length stating corresponding response message required time, whether more than a predetermined threshold, if it is judges that this user employs
Proxy server.
In the present embodiment, described control instruction can be, but not limited to as js code, described corresponding response message can but
It is not limited to ajax request；This is principle HTTP document being parsed using browser, when the browser of client receives institute
After stating js code, this js code can be executed, return ajax and ask to server.Can also be controlled using other during practical application
The instruction of browser.
In the present embodiment, server time stamp in the described HTTP message carrying control instruction, can also be carried, described right
This server time stamp is comprised in the response message answered.
The signing messages of server, institute in the present embodiment, can also be carried in the described HTTP message carrying control instruction
State and in corresponding response message, comprise this signing messages.
In the present embodiment, described predetermined threshold can based on experience value or test value determine, and can according to judge needed for
Fineness is sized；Such as, when merely desiring to identify trans-regional proxy server, (actual customer end is with proxy server not
In same area) when, it is relatively large that this predetermined threshold can be arranged, and can be, but not limited to the TCP time difference for a times；When
When wanting to identify the proxy server with area, then can be less by the setting of described predetermined threshold.
In an embodiment of the present embodiment, described judgement is received for the HTTP message issuing same user, server
Confirm required time to TCP ACK with whether the difference of the length receiving described corresponding response message required time is predetermined more than one
The step of threshold value specifically can include：
Calculate a HTTP message from be sent to a user to receive this HTTP message corresponding TCP ACK confirm when
Between poor, obtain the TCP time difference of this user, that is, receive TCP ACK confirm required time；
The HTTP message of control instruction is carried from being sent to a user to receiving corresponding response message described in calculating
Time difference, obtain the HTTP time difference of this user, that is, receive corresponding response message required time；
Calculate the difference between the TCP time difference of a user and HTTP time difference, judge whether the absolute value of this difference surpasses
Cross a predetermined threshold.
In this enforcement, the described HTTP message carrying control instruction can be somebody's turn to do with facilitating to follow the tracks of using special HTTP head
HTTP message and its corresponding TCP ACK confirmation/response message.
In the present embodiment, can be that same HTTP message is tracked, obtain described TCP time difference and HTTP respectively
Time difference；Respectively different HTTP message can also be tracked, to obtain described TCP time difference and HTTP time difference.
In the another embodiment of the present embodiment, described judgement is for the HTTP message issuing same user, server
Receive TCP ACK confirmation required time and whether the difference of the length receiving described corresponding response message required time is pre- more than one
The step determining threshold value specifically can include：
After server sends the HTTP message carrying control instruction described in, it is corresponding that record receives this HTTP message
Moment and the moment receiving the corresponding response message of this HTTP message that TCP ACK confirms；Judge the interval in this two moment
Whether time span is more than a predetermined threshold.
One specific example of the present embodiment is as shown in figure 3, comprise the steps：
Server passes through ICP/IP protocol stack receiving data message, after receiving the GET request of user, returns http response
Message, and bring special HTTP head, js code server timestamp；
Record the five-tuple in http response message, this http response message is sent by ICP/IP protocol stack, and wait
Corresponding TCP ACK confirms；After receiving corresponding TCP ACK confirmation, calculate and send this http response message and receive this TCP
Time difference between ACK confirmation, as TCP time difference；
Record the IP (purpose IP of http response message) of other side, send the time of this http response message and wait correspondence
Ajax request；After receiving corresponding ajax request, calculate and send this http response message and receive between this ajax request
Time difference, as HTTP time difference；
Relatively TCP time difference and HTTP time difference, if it exceeds a predetermined threshold, then judge that user is by agency service
Device connects, and otherwise judges that user connects not over proxy server.
One of ordinary skill in the art will appreciate that all or part of step in said method can be instructed by program
Related hardware completes, and described program can be stored in computer-readable recording medium, such as read only memory, disk or CD
Deng.Alternatively, all or part of step of above-described embodiment can also be realized using one or more integrated circuits.Accordingly
Ground, each module/unit in above-described embodiment can be to be realized in the form of hardware, it would however also be possible to employ the shape of software function module
Formula is realized.The application is not restricted to the combination of the hardware and software of any particular form.
Certainly, the application also can have other various embodiments, in the case of without departing substantially from the application spirit and its essence, ripe
Know those skilled in the art and work as and various corresponding changes and deformation can be made according to the application, but these corresponding changes and change
Shape all should belong to the protection domain of claims hereof.
Claims (10)
1. a kind of proxy server identifying device is it is characterised in that include：
HTTP message transmitter, for receive when server user GET request when, generate and return one and carry control instruction
HTTP message, described control instruction be used for instruction receive this HTTP message browser return a corresponding response message
To server；
Detector, for judging for the described HTTP message carrying control instruction, server receives TCP ACK and confirms to be taken
Between and receive described corresponding response message required time length difference whether more than a predetermined threshold, if it is judging should
User employs proxy server.
2. device as claimed in claim 1 it is characterised in that：
Described control instruction is js code, and described corresponding response message is asked for ajax.
3. device as claimed in claim 1 it is characterised in that：
Server time stamp and signing messages is also carried, described corresponding response disappears in the described HTTP message carrying control instruction
This server time stamp and signing messages is comprised in breath.
4. the device as any one of Claim 1-3 is it is characterised in that described detector includes：
TCP time detector, for carrying the HTTP message of control instruction described in calculating from being sent to user to receiving this HTTP
Time difference between message corresponding TCP ACK confirmation, obtains the TCP time difference of this user；
HTTP time detector, the HTTP message for carrying control instruction described in calculating is right to receiving from being sent to described user
Time difference between the response message answered, obtains the HTTP time difference of this user；
Comparator, for calculating the difference between the TCP time difference of a user and HTTP time difference, if the absolute value of this difference
More than a predetermined threshold, then judge that this user employs proxy server.
5. the device as any one of Claim 1-3 is it is characterised in that detector judges to carry control for described
Instruction HTTP message, server receives TCP ACK and confirms required time and receive described corresponding response message and taken
Between the difference of length whether refer to more than a predetermined threshold：
After server sends the HTTP message carrying control instruction described in, record receives this HTTP message to described detector
Moment and the moment receiving the corresponding response message of this HTTP message that corresponding TCP ACK confirms；Judge this two moment
Interval time lengths whether more than a predetermined threshold.
6. a kind of proxy server identification method, including：
When server receives the GET request of user, generate and return a HTTP message carrying control instruction, described control
Instruct the browser receiving this HTTP message for instruction and return a corresponding response message to server；
Judge for the described HTTP message carrying control instruction, server receives TCP ACK and confirms required time and receive institute
The difference of length stating corresponding response message required time, whether more than a predetermined threshold, if it is judges that this user employs
Proxy server.
7. method as claimed in claim 6 it is characterised in that：
Described control instruction is js code, and described corresponding response message is asked for ajax.
8. method as claimed in claim 6 it is characterised in that：
Server time stamp and signing messages is also carried, described corresponding response disappears in the described HTTP message carrying control instruction
This server time stamp and signing messages is comprised in breath.
9. the method as any one of claim 6 to 8 is it is characterised in that described judgement carries control and refers to for described
Order HTTP message, server receives TCP ACK and confirms required time and receive described corresponding response message required time
The difference of length whether include more than the step of a predetermined threshold：
The HTTP message carrying control instruction described in calculating is true to receiving this HTTP message corresponding TCP ACK from being sent to user
Time difference between recognizing, obtains the TCP time difference of this user；
The HTTP message of control instruction is carried from being sent to described user to receiving corresponding response message described in calculating
Time difference, obtains the HTTP time difference of this user；
Calculate the difference between the TCP time difference of a user and HTTP time difference, whether the absolute value judging this difference is more than one
Predetermined threshold.
10. the method as any one of claim 6 to 8 is it is characterised in that described judgement carries control and refers to for described
Order HTTP message, server receives TCP ACK and confirms required time and receive described corresponding response message required time
The difference of length whether include more than the step of a predetermined threshold：
After server sends the HTTP message carrying control instruction described in, record receives the corresponding TCP of this HTTP message
Moment and the moment receiving the corresponding response message of this HTTP message that ACK confirms；Judge the interval time in this two moment
Whether length is more than a predetermined threshold.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210309017.6A CN103634359B (en) | 2012-08-27 | 2012-08-27 | A kind of proxy server identification method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210309017.6A CN103634359B (en) | 2012-08-27 | 2012-08-27 | A kind of proxy server identification method and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN103634359A CN103634359A (en) | 2014-03-12 |
| CN103634359B true CN103634359B (en) | 2017-03-01 |
Family
ID=50214981
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201210309017.6A Active CN103634359B (en) | 2012-08-27 | 2012-08-27 | A kind of proxy server identification method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103634359B (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| EP4044556A4 (en) * | 2019-11-05 | 2022-11-02 | Huawei Technologies Co., Ltd. | Access device type determination method, device and system |
Families Citing this family (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105095220B (en) * | 2014-04-24 | 2019-05-03 | 华为技术有限公司 | A kind of browser implementation method, terminal and virtualization agent device |
| CN104363265B (en) * | 2014-10-23 | 2017-12-12 | 深信服网络科技（深圳）有限公司 | Proxy surfing detection method and device |
| CN105242908B (en) * | 2015-11-24 | 2018-02-02 | 西安烽火电子科技有限责任公司 | A kind of big document transmission method of VHF radio for flowing control firmly based on serial ports |
| CN107222503B (en) * | 2017-07-10 | 2020-08-11 | 北京知道未来信息技术有限公司 | Method for detecting stream encryption proxy server |
| JP7233834B2 (en) | 2017-10-10 | 2023-03-07 | キヤノン株式会社 | IMAGE PROCESSING DEVICE, CONTROL METHOD AND PROGRAM OF IMAGE PROCESSING DEVICE |
| CN110022334B (en) * | 2018-01-09 | 2022-01-11 | 香港理工大学深圳研究院 | Detection method and detection device of proxy server and terminal equipment |
| CN110138740A (en) * | 2019-04-15 | 2019-08-16 | 新浪网技术(中国)有限公司 | Pass through the method and system of Transparent Proxy access internet for detecting user |
| CN111431890B (en) * | 2020-03-20 | 2021-12-03 | 苏州瑞立思科技有限公司 | Low-overhead intermediate server proxy transmission authentication method and device |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6445681B1 (en) * | 1999-09-15 | 2002-09-03 | Vocaltec Communications Ltd. | Method for measuring delay parameters in a network |
| CN102377620A (en) * | 2011-12-09 | 2012-03-14 | 浙江大学 | Method for detecting broadband private connection based on open system interconnection (OSI) transmission layer timestamp |
-
2012
- 2012-08-27 CN CN201210309017.6A patent/CN103634359B/en active Active
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6445681B1 (en) * | 1999-09-15 | 2002-09-03 | Vocaltec Communications Ltd. | Method for measuring delay parameters in a network |
| CN102377620A (en) * | 2011-12-09 | 2012-03-14 | 浙江大学 | Method for detecting broadband private connection based on open system interconnection (OSI) transmission layer timestamp |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| EP4044556A4 (en) * | 2019-11-05 | 2022-11-02 | Huawei Technologies Co., Ltd. | Access device type determination method, device and system |
Also Published As
| Publication number | Publication date |
|---|---|
| CN103634359A (en) | 2014-03-12 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103634359B (en) | A kind of proxy server identification method and device | |
| CN102655481B (en) | A kind of instant messaging chat content inspection method based on webpage and system | |
| WO2010019258A1 (en) | Method and system for communication between a client system and a server system | |
| CN105871947B (en) | The method and device of cross-domain request data | |
| US20150058469A1 (en) | Monitoring NAT Behaviors Through URI Dereferences in Web Browsers | |
| CN106657426A (en) | Processing method and device for domain name parsing request, and server | |
| CN103220161A (en) | Method and device for detecting server status | |
| JP2006120130A (en) | System and method for managing access log | |
| CN103763156A (en) | Network speed measurement method and system | |
| CN107018001A (en) | A kind of application and trouble localization method and device | |
| CN102624878B (en) | Method and system for identifying P2P (peer-to-peer) protocol on basis of DNS (domain name server) protocol | |
| CN105049426A (en) | Client identity authentication method and client identity authentication system | |
| CN105279651B (en) | A kind of transaction data monitor processing method and system | |
| CN103139758B (en) | Mobile Socket class application system, server, method and WAP gateway | |
| CN102340504A (en) | Method, device and system for recognizing remote desktop user identity | |
| CN106161478B (en) | Accurate attack recognition method based on the variation of http response head | |
| CN105959297A (en) | Quick login methods, terminal, smart device, and server | |
| KR20110057529A (en) | A system of measuring server's response time by using a dummy request tag and the method thereof | |
| CN107392643A (en) | A kind of method and system for following the trail of and identifying web advertisement transmission data | |
| CN113395278B (en) | Method and system for detecting data packet grabbing of Burpesite packet grabbing tool | |
| CN105025028B (en) | The black holes IP based on flow analysis find method | |
| CN111130993B (en) | Information extraction method and device and readable storage medium | |
| CN113542270A (en) | Internet asset fingerprint rapid detection method and system | |
| CN100388688C (en) | Surrogate detecting system and method | |
| CN109600283A (en) | The detection method and system of instant messaging network quality |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| REG | Reference to a national code |
Ref country code: HK Ref legal event code: DE Ref document number: 1193517 Country of ref document: HK |
|
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| REG | Reference to a national code |
Ref country code: HK Ref legal event code: GR Ref document number: 1193517 Country of ref document: HK |
|
| TR01 | Transfer of patent right |
Effective date of registration: 20191209 Address after: P.O. Box 31119, grand exhibition hall, hibiscus street, 802 West Bay Road, Grand Cayman, Cayman Islands Patentee after: Innovative advanced technology Co., Ltd Address before: A four-storey 847 mailbox in Grand Cayman Capital Building, British Cayman Islands Patentee before: Alibaba Group Holding Co., Ltd. |
|
| TR01 | Transfer of patent right |