CN103986616B - Method and device for recognizing number of machines having access to internet through proxy - Google Patents
Method and device for recognizing number of machines having access to internet through proxy Download PDFInfo
- Publication number
- CN103986616B CN103986616B CN201410150991.1A CN201410150991A CN103986616B CN 103986616 B CN103986616 B CN 103986616B CN 201410150991 A CN201410150991 A CN 201410150991A CN 103986616 B CN103986616 B CN 103986616B
- Authority
- CN
- China
- Prior art keywords
- property value
- identity property
- client
- value
- target sequence
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Landscapes
- Debugging And Monitoring (AREA)
- Information Transfer Between Computers (AREA)
Abstract
A method for recognizing the number of machines having access to the internet through a proxy includes the steps that a detection device regularly intercepts webpage access requests uploaded by a client-side and returns monotone increasing or monotone decreasing number identification to the client-side; the client-side writes the number identification in identification attribute values when the identification attribute values of the flash cookie cached in a browser are empty; the detection device receives the identification attribute values uploaded by the client-side, obtains an identification attribute value sequence under a target IP, sequentially records the start positions, the end positions and the received maximum/minimum values of the identification attribute values in the identification attribute value sequence, and removes the repeated identification attribute values; the detection device obtains the minimum number of the machines having access to the internet through the proxy according to the start position, the end position and the received maximum/minimum value of each identification attribute value in the identification attribute value sequence. According to the method for recognizing the number of the machines having access to the internet through the proxy, accuracy can be improved.
Description
Technical field
The present invention relates to Internet technical field, the method and dress of more particularly to a kind of number of machines of identification proxy surfing
Put.
Background technology
Proxy surfing is referred to using router or acts on behalf of the technology that instrument realizes the shared IP address online of many people.Example
Such as, if user is surfed the Net using ADSL modes, a router can be again connect under the modem of ADSL and sets up subnet, with the road
The multiple terminals connected by the LAN mouths of device can pass through the router proxy surfing.
Using proxy surfing, very big impairment of benefit is caused for bandwidth operator.User can many people share same
Account proxy surfing, so as to bypass the account charge mode of bandwidth operator.Therefore prevent user from surfing the Net by agent way,
Become bandwidth operator problem demanding prompt solutions.
However, inventor it has been investigated that the identifying user in conventional art whether the method for proxy surfing at least exist with
Lower problem：In conventional art, the general method using based on network packet feature is such as gone out by counting the id of Ip packets
Existing rule, or the sequence number rule of TCP.But existing router has supported the id information and tcp sequences for changing ip packets
The method that the number of machines of proxy surfing is recognized in number information, therefore conventional art is inaccurate.
The content of the invention
Based on this, it is necessary to provide a kind of method of the number of machines of the identification proxy surfing that can improve accuracy.
A kind of method of the number of machines of identification proxy surfing, including：
Testing equipment periodically intercepts the web access requests of client upload, and to the client monotonic increase or list are returned
The Digital ID that tune successively decreases；
Identity property value in flash cookie of the client in browser rs cache is space-time by the numeral
The mark write identity property value；
The testing equipment receives the identity property value of the client upload, obtains the identity property value sequence under Target IP
Row, record successively the original position of the identity property value in the identity property value sequence, end position, have received maximum/most
Little value, and remove the identity property value of repetition；
Original position, the stop bits of each identity property value of the testing equipment in the identity property value sequence
Put, received the minimal amount that maximum/minimum value obtains the number of machines of proxy surfing.
Wherein in one embodiment, each identity property of the testing equipment in the identity property value sequence
The original position of value, end position, wrap the step of received the minimal amount of the number of machines that maximum/minimum value obtains proxy surfing
Include：
Using the identity property value sequence as target sequence, according to the target sequence order traversal described in target sequence
Row, using the identity property value for traversing as desired value；
The desired value is taken out in the target sequence, looked-up sequence is located at the desired value in the target sequence
Afterwards, and identity property value more than/less than the desired value the maximum/minimum value of reception, and original position be more than desired value
End position min/max identity property value, if finding, using the identity property value for finding as target
Value, iteration perform described in the step of take out the desired value in target sequence；
If not finding, corresponding feature subsequence is generated according to the identity property value taken out, identity property will be taken out
Target sequence after value is again as target sequence, and iteration performs mesh described in the order traversal according to the target sequence
The step of mark sequence；
It is space-time in the target sequence, calculates the number of the feature subsequence, judges the number of machines of proxy surfing
Minimal amount is the number of the feature subsequence.
Wherein in one embodiment, the testing equipment returns the number of monotonic increase or monotone decreasing to the client
The step of word is identified includes：
The testing equipment generates temporary page, and the temporary page includes flash resource links and shell script, institute
State the Digital ID of flash resource links correspondence monotonic increase or monotone decreasing；
The testing equipment by by the web access requests be redirected to the temporary page be returned to it is described
Client.
Identity property wherein in one embodiment, in flash cookie of the client in browser rs cache
Being worth the step of Digital ID is write into the identity property value for space-time includes：
The client obtains the corresponding flash resources of flash resource links in the temporary page, by described
Whether the identity property value in flash resource judgment browser rs caches in corresponding flash cookie is sky, if so, then
The Digital ID of the monotonic increase or monotone decreasing is write into the identity property value.
Wherein in one embodiment, the step of the testing equipment obtains the identity property value of the client upload it
It is front also to include：
The client is obtained in flash cookie corresponding with the flash resource links by the shell script
Identity property value, and send it to the testing equipment.
Wherein in one embodiment, the client sends the identity property value got by shell script
To also including after the step of the testing equipment：
The client refreshes browser page by the shell script, and the web access requests are initiated again.
Additionally, there is a need to the system for providing a kind of number of machines of the identification proxy surfing that can improve accuracy.
A kind of system of the number of machines of identification proxy surfing, including testing equipment and client, the testing equipment is also used
In the web access requests for periodically intercepting client upload, to the client numeral mark of monotonic increase or monotone decreasing is returned
Know；
It is space-time by institute that the client is additionally operable to the identity property value in the flash cookie in browser rs cache
State Digital ID and write the identity property value；
The testing equipment is additionally operable to receive the identity property value of the client upload, obtains the mark category under Target IP
Property value sequence, records successively the original position of the identity property value in the identity property value sequence, end position, has received most
Greatly/minimum of a value, and remove the identity property value of repetition；
Original position, the stop bits of each identity property value of the testing equipment in the identity property value sequence
Put, received the minimal amount that maximum/minimum value obtains the number of machines of proxy surfing.
Wherein in one embodiment, the testing equipment is additionally operable to the identity property value sequence as target sequence
Row, according to the target sequence order traversal described in target sequence, using the identity property value for traversing as desired value；
The desired value is taken out in the target sequence, looked-up sequence is located at the desired value in the target sequence
Afterwards, and identity property value more than/less than the desired value the maximum/minimum value of reception, and original position be more than desired value
End position min/max identity property value, if finding, using the identity property value for finding as target
It is worth, the desired value is taken out in target sequence described in iteration execution；
If not finding, corresponding feature subsequence is generated according to the identity property value taken out, identity property will be taken out
Target sequence after value again as target sequence, and iteration perform according to the target sequence order traversal described in target sequence
Row；
It is space-time in the target sequence, calculates the number of the feature subsequence, judges the number of machines of proxy surfing
Minimal amount is the number of the feature subsequence.
Wherein in one embodiment, the testing equipment is additionally operable to generate temporary page, and the temporary page is included
The Digital ID of flash resource links and shell script, the flash resource links correspondence monotonic increase or monotone decreasing；
The testing equipment is additionally operable to be returned it into by the way that the web access requests are redirected to into the temporary page
To the client.
Wherein in one embodiment, the client is additionally operable to obtain the flash resource links in the temporary page
Corresponding flash resources, by the mark in flashcookie corresponding in the flash resource judgments browser rs cache
Know whether property value is empty, if so, then by the Digital ID write identity property value of the monotonic increase or monotone decreasing.
Wherein in one embodiment, the client is additionally operable to be obtained and flash moneys by the shell script
Identity property value in the corresponding flash cookie of linking sources, and send it to the testing equipment.
Wherein in one embodiment, the client is additionally operable to refresh browser page, weight by the shell script
Newly initiate the web access requests.
In the method and system of the number of machines of above-mentioned identification proxy surfing, because the support of flash cookie is across station characteristic
With support browser-cross characteristic so that identity property value is on the client global property, therefore, identity property value can be used for
Mark client.So that testing equipment can pass through the start bit of each identity property value in the identity property value sequence for receiving
Put, end position, received the minimal amount that maximum/minimum value identifies exactly the number of machines of proxy surfing, so that
Keeper can limit according to the number of proxy surfing and carry out necessary fine.
Description of the drawings
Fig. 1 is the flow chart of the method for the number of machines that proxy surfing is recognized in one embodiment；
Fig. 2 is the flow chart of identification process in one embodiment；
Fig. 3 is the structural representation of the system of the number of machines that proxy surfing is recognized in one embodiment；
Fig. 4 is the structural representation of the system of the number of machines that proxy surfing is recognized in another embodiment.
Specific embodiment
In one embodiment, as shown in figure 1, it is a kind of identification proxy surfing number of machines method, the method completely according to
Rely in computer program, the computer program can run in the computer system based on Feng Luoyiman systems.The department of computer science
Based on testing equipment and the client being connected with testing equipment, the testing equipment can be the backbone network node of bandwidth operator to system
Equipment, the client can be the internet terminal equipments such as router, PC, notebook computer, smart mobile phone.
The method is comprised the following steps：
Step S102, testing equipment periodically intercepts the web access requests of client upload, returns dullness to client and passs
Increasing or the Digital ID of monotone decreasing.
In the present embodiment, testing equipment can be every default time span, such as net for intercepting client upload in 1 minute
Access to web page is asked.The web access requests of client upload are sent by its browser, user in client operation, by click on
Link in browser page or can initiate web page access to the corresponding network address in browser address bar input network address please
Ask.
In the present embodiment, the step of testing equipment returns the Digital ID of monotonic increase or monotone decreasing to client is wrapped
Include：
Testing equipment generates temporary page, and by the way that web access requests are redirected to into temporary page client is returned to
End.Temporary page includes flash resource links and shell script, flash resource links correspondence monotonic increase or monotone decreasing
Digital ID.
After testing equipment intercepts the web access requests of client upload, the request can be redirected to the interim page
Face, the browser of client is received after the temporary page for returning, in this case it is not apparent that tested measurement equipment is blocked the web access requests
Cut, still believe that the page is that the corresponding website of web access requests returns.For example, if user accesses on client browser
Www.baidu.com, then testing equipment intercept after the request, return temporary page, browser received after the temporary page still
So think that the page is the page that website www.baidu.com is returned.
Section url of flash resource links, i.e., one is included in temporary page, the url correspondences are stored on advance testing equipment
Flash resource files.Preferably, testing equipment generate temporary page before can also to arrange flash resource links corresponding
Flash resources are permission across station access module.For example, call flash by Security.allowDomain (" * ") function
Resource is positioned to allow for across station access module, and the browser of client is when the flash resources are loaded, you can it is carried out across station
Operation, so as to solve due to the Redirect Address of temporary page it is not corresponding and caused with the domain name of flash resource links across
Stand the problem of operation failure.
The Digital ID of monotonic increase or monotone decreasing for numeric type mark, and for increasing or decreasing.For example, if just
Initial value is 1, and testing equipment is intercepted successively after multiple web access requests, then the monotonic increase that returns successively or monotone decreasing
Digital ID can be 1,2,3,4..., constitute monotonically increasing sequence；Can also be 1000,999,997,990..., constitute
The sequence of monotone decreasing.
Step S104, the identity property value in flash cookie of the client in browser rs cache is space-time by numeral
Mark write identity property value.
In the present embodiment, client can obtain the corresponding flash resources of flash resource links in temporary page, lead to
Whether the identity property value crossed in flash cookie corresponding in flash resource judgment browser rs caches is sky, if so,
Then the Digital ID of monotonic increase or monotone decreasing is write into identity property value.
Flash cookie are cache information corresponding with flash resources in browser rs cache.Browser is provided according to flash
Linking sources loading flash resources after can by calling flash resources in interface function flash cookie are operated.
Flash cookie are the locally store information that Flash is realized using SharedObject classes, with two characteristics：
1. support to be accessed across station.I.e. the flashcookie corresponding with flash resources of A websites write, can allow by it
The flash resource operations that his website is downloaded.
2. support that browser-cross is accessed.Such as client writes the information of flashcookie, client by IE browser
Also can be read out by firefox browsers.
That is, the identity property value in flash cookie is the global property value in client, to identity property
The modification of value affect in client the program for calling flash in need.
In the present embodiment, the identity property value in flash cookie can be default attribute field.Flash resources
In interface function it is called when, can obtain the identity property value in its corresponding flash cookie be whether it is empty, if it is empty,
Then the Digital ID of monotonic increase or monotone decreasing can be write the identity property value by the interface function.For example, can set to detection
Standby request Digital ID, and it is written into flash cookie；Digital ID also can write on interim page when temporary page is returned
In face or flash resources, temporary page or the Digital ID in flash resources are can read, and be written into flash cookie.
In the present embodiment, if the identity property value detected in flash cookie has been present, any behaviour it is not
Make.
Step S106, testing equipment obtains the identity property value of client upload, obtains the identity property value under Target IP
Sequence, successively the original position of each the identity property value in record identification attribute value sequence, end position, received maximum/
Minimum of a value.
In the present embodiment, client also obtains flashcookie corresponding with flash resource links by shell script
In identity property value, and send it to testing equipment.
Further, the identity property value got by shell script is sent to detection by client by ajax requests
Equipment.Ajax requests are browser asynchronous access request, and identity property value is sent to testing equipment without the need for brush by ajax requests
New page.
Further, the step of identity property value got by shell script is sent to testing equipment by client it
Also browser page can be refreshed by shell script afterwards, web access requests are initiated again.I.e. client by shell script to
Testing equipment is fed back after the identity property value with global property property stored in its flash cookie, then can be initiated again
Aforementioned intercepted web access requests, due to shell script, to perform speed very fast, therefore does not affect the web page browsing of user
Experience.
That is, the write operation to flash cookie is only carried out when identity property value is not present, and at it
In the presence of, do not replace, that is, it is not sky to keep the identity property value.After not being sky in the identity property value, then
The identity property value in the flash cookie can be obtained by shell scripts such as javascript scripts, is then sent out by ajax
Asynchronous access request is played, by the identity property value uploading detection equipment.
In the present embodiment, testing equipment is sustainable receives multiple identity property values that multiple client is uploaded.And will connect
The identity property value for receiving is sorted out according to the IP address of client, and the identity property value after classification is according to the time-sequencing for receiving
Obtain identity property value sequence.Target IP is the IP address of the number of machines for needing to be identified proxy surfing.Preferably, may be used
The length of the corresponding identity property value sequence of Target IP is obtained, if the length is more than threshold value, into step S108.If threshold value sets
Put larger, then the identity property value for receiving is more, and detection time is longer, and accuracy is higher.
In the present embodiment, the original position of each identity property value successively in record identification attribute value sequence, end
Position, refer to table 1 the step of received maximum/minimum value.For example, if the amount of being incremented by that testing equipment is returned is 1 flash
Cookie, the identity property value sequence for receiving（Its order is the order of the identity property value for receiving）For：
It is then corresponding, the original position of each identity property value, end position in the sequence, maximum/minimum value has been received
I.e. as shown in table 1 is recorded：
Table 1
Wherein, Index represents the sequence number of the unduplicated identity property value for receiving（Represented with i）, original position is
Receive the position for occurring the identity property value in identity property value sequence for the first time（As shown in table 1, id [0] be the 1st and
The identity property value for receiving for 1st time, is 3, and original position is j=0；Id [5] is the 6th and the 1st time mark for receiving
Property value, although 9 is the 7th identity property value for receiving, but repeat to receive 1 time due to 4, therefore 9 is still the 6th and the
The identity property value for receiving for 1 time, is id [5], and original position is j=6）, end position is identity property value last time
The position occurred in the identity property value sequence for receiving（Such as id [0]=3, its original position is 0, but it is in testing equipment the
Occur during i.e. j=8 when receiving property value for 9 times, therefore, end position is j=8）.
Maximum/minimum value has been received has been the maximum received in the identity property value having been received by after the identity property value
Value/minimum of a value.
For example, identity property value 3 is received for the first time（That is id [0]）When, it is 3 for 0, max [0] to record its end [0], and
When identity property value 3 is subsequently received for the second time, it is 8 to update its end [0]（The 9th identity property value for receiving）, update
Its max [0] is 9（It is maximum for 9 in the first 9 identity property values for receiving）.
It should be noted that having received the dullness of the Digital ID that maximum/minimum value is returned with testing equipment to client
It is incremented by or monotone decreasing characteristic correspondence, that is to say, that if what testing equipment returned is monotonically increasing Digital ID, record value
To receive maximum；If testing equipment return be monotone decreasing Digital ID, record value to receive minimum of a value.And
In practical operation and need not exist for and the identical tables of data of table 1, table 1 only represents the logical relation of data structure, actually should
It can be arbitrarily similar data structure with.
Step S108, the original position of each identity property value of the testing equipment in identity property value sequence, end
Position, received maximum/minimum value obtain proxy surfing number of machines minimal amount.
In the present embodiment, as shown in Fig. 2 can be specially：
Step S202, using identity property value sequence as target sequence；
Step S204, judges that whether target sequence is empty, then execution step S206 if not empty.
Step S206, according to the order traversal target sequence of target sequence, using the identity property value for traversing as target
Value；
Step S208, takes out desired value in target sequence, and looked-up sequence is located at after desired value in target sequence, and
Identity property value is more than/is less than the maximum/minimum value of reception of desired value, and original position more than the end position of desired value
Min/max identity property value（If Digital ID monotonic increase, for minimum；If Digital ID monotone decreasing, for most
Greatly）If finding, execution step S210.
Step S210, using the identity property value for finding as desired value, iteration execution step S208.
If not finding, execution step S212.
Step S212, according to the identity property value taken out corresponding feature subsequence is generated, and will be taken out after identity property value
Target sequence again as target sequence, and iteration execution step S204.
It is space-time in target sequence, execution step S214 calculates the number of feature subsequence, judges the machine of proxy surfing
Several minimal amounts is characterized the number of subsequence.
As above in example, identity property value can be taken out in turn as desired value, generation feature is explained in detail below according to Index
The process of sequence：
The identity property value sequence removed after duplicate data obtained through step S106 as target sequence, as：
{3、2、4、1、7、9、5、6}。
When traversing i=0, extraction id [0] in { 3,2,4,1,7,9,5,6 } is 3 as desired value：
Solve id [i]>Max [0], i.e., the identity property value for finding more than 9 in { 3,2,4,1,7,9,5,6 } is corresponding
Index values, obtain i and do not exist, then obtain feature subsequence { 3 }, and will take out the target sequence { 2,4,1,7,9,5,6 } after 3
As target sequence；
I=1 is traversed, extraction id [1] in { 2,4,1,7,9,5,6 } is 2 as desired value：
Solve id [i]>Max [1], i.e., the identity property value for finding more than 9 in { 2,4,1,7,9,5,6 } is corresponding
Index values, obtain i and do not exist, then obtain feature subsequence { 2 }, and will take out the target sequence { 2,4,1,7,9,5,6 } after 2
As target sequence；
I=2 is traversed, extraction id [2] in { 4,1,7,9,5,6 } is 4 as desired value：
Solve id [i]>Max [2], i.e., find the corresponding Index of identity property value more than 7 in { 4,1,7,9,5,6 }
Value, obtains i for 5（Corresponding id [5] is 9）, and end [2]（That is j is equal to 5）<begin[5]（That is j is equal to 6）, then id [5] is taken
Go out as desired value：
Id [i] is solved in { 9,5,6 }>Max [5], i.e., the identity property value for finding more than 9 in { 9,5,6 } is corresponding
Index values, obtain i and do not exist；
The feature subsequence that the identity property value then taken out is generated is { 4,9 }, will take out the target sequence after { 4,9 } 1,
7th, 5,6 } as target sequence；
Traverse i=3, extract in { 1,7,5,6 } id [3] be 1 as desired value,：
Id [i] is solved in { 1,7,5,6 }>Max [3], i.e., find the identity property value pair more than 4 in { 1,7,5,6 }
The Index values answered, obtain i for 4,6,7, filter out id [i] it is minimum for i=6, i.e. id [6]=5, and end [3]（That is j is equal to 3）<
begin[6]（That is j is equal to 6）, then id [6] is taken out as desired value：
Id [i] is solved in { 6 }>Max [6], i.e., find the corresponding Index values of identity property value more than 9 in { 6 },
It is 1,5 without the identity property value that solution is then taken out, the feature subsequence of generation is { 1,5 }, will take out the target sequence after { 1,5 }
{ 7,6 } are used as target sequence；
Traversal i=4, extraction id [4] in { 7,6 } is 7 as desired value：
Id [i] is solved in { 6 }>Max [4], i.e., find the corresponding Index values of identity property value more than 9 in { 6 },
Obtain i not exist, then obtain feature subsequence { 7 }, and the target sequence { 6 } after 7 will be taken out as target sequence；
Traversal i=7, extraction id [7] in { 6 } is 6 as desired value：
Id [i] is solved in { }>Max [4], obtains i and does not exist, then obtain feature subsequence { 6 }, and after 6 being taken out
Target sequence { } is used as target sequence；
Because target sequence { } terminates for sky, therefore iteration, the feature subsequence for now obtaining is：
{3}、{2}、{4、9}、{1、5}、{7}、{6}；
That is, identity property value 4 and 9 is probably same station terminal send, identity property value 1 and 5 may be by
Same station terminal sends（It 5 is to be sent by a station terminal to be also possible to be, 1 and 7 are sent by same station terminal, herein only
Require to obtain minimal amount, therefore combination does not affect correctness）, therefore, the minimal amount of the machine of proxy surfing is 6
Platform.
In one embodiment, as shown in Figure 3 and Figure 4, a kind of system of the number of machines of identification proxy surfing, including detection
Equipment 10 and client 20, wherein：
Testing equipment 10 is used to periodically intercept the web access requests of client upload, to client return monotonic increase or
The Digital ID of monotone decreasing.
Identity property value in the flash cookie that client 20 is used in browser rs cache is that space-time marks numeral
Know write identity property value.
Testing equipment 10 is additionally operable to receive the identity property value of client upload, obtains the identity property value sequence under Target IP
Row, successively the original position of the identity property value in record identification attribute value sequence, end position, received maximum/minimum value,
And remove the identity property value of repetition.
Testing equipment 10 is additionally operable to original position, the stop bits of each the identity property value in identity property value sequence
Put, received the minimal amount that maximum/minimum value obtains the number of machines of proxy surfing.
In the present embodiment, testing equipment 10 is additionally operable to identity property value sequence as target sequence, according to target sequence
The order traversal target sequence of row, using the identity property value for traversing as desired value；
Desired value is taken out in target sequence, looked-up sequence is located at after desired value in target sequence, and identity property
Value more than/less than the maximum/minimum value of reception of desired value, and original position is more than the minimum/most of the end position of desired value
Big identity property value, if finding, using the identity property value for finding as desired value, iteration is performed in target sequence
Take out desired value；
If not finding, corresponding feature subsequence is generated according to the identity property value taken out, identity property will be taken out
Target sequence after value is again as target sequence, and iteration is performed according to the order traversal target sequence of target sequence；
It is space-time in target sequence, calculates the number of feature subsequence, judges the minimal amount of the number of machines of proxy surfing
It is characterized the number of subsequence.
In the present embodiment, testing equipment 10 be additionally operable to generate temporary page, temporary page comprising flash resource links with
And the Digital ID of shell script, flash resource links correspondence monotonic increase or monotone decreasing；
Testing equipment 10 is additionally operable to be returned to client by the way that web access requests are redirected to into temporary page.
In the present embodiment, client 20 is additionally operable to obtain the corresponding flash moneys of flash resource links in temporary page
Whether source, be sky by the identity property value in flash cookie corresponding in flash resource judgment browser rs caches,
If so, then by the Digital ID write identity property value of monotonic increase or monotone decreasing.
In the present embodiment, client 20 is additionally operable to obtain flash corresponding with flash resource links by shell script
Identity property value in cookie, and send it to testing equipment.
In the present embodiment, client 20 is additionally operable to refresh browser page by shell script, webpage is initiated again and is visited
Ask request.
In the method and system of the number of machines of above-mentioned identification proxy surfing, because the support of flash cookie is across station characteristic
With support browser-cross characteristic so that identity property value is on the client global property, therefore, identity property value can be used for
Mark client.So that testing equipment can pass through the start bit of each identity property value in the identity property value sequence for receiving
Put, end position, received the minimal amount that maximum/minimum value identifies exactly the number of machines of proxy surfing, so that
Keeper can limit according to the number of proxy surfing and carry out necessary fine.
One of ordinary skill in the art will appreciate that realizing all or part of flow process in above-described embodiment method, can be
Related hardware is instructed to complete by computer program, described program can be stored in a computer read/write memory medium
In, the program is upon execution, it may include such as the flow process of the embodiment of above-mentioned each method.Wherein, described storage medium can be magnetic
Dish, CD, read-only memory（Read-Only Memory, ROM）Or random access memory（Random Access
Memory, RAM）Deng.
Claims (10)
1. it is a kind of identification proxy surfing number of machines method, including：
Testing equipment periodically intercepts the web access requests of client upload, returns monotonic increase to the client or dullness is passed
The Digital ID for subtracting；
Identity property value in flash cookie of the client in browser rs cache is space-time by the Digital ID
Write the identity property value；
The testing equipment receives the identity property value of the client upload, obtains the identity property value sequence under Target IP,
The original position of the identity property value in the identity property value sequence, end position are recorded successively, received maximum/minimum
Value, and remove the identity property value of repetition；
The original position of each identity property value of the testing equipment in the identity property value sequence, end position,
The minimal amount that maximum/minimum value obtains the number of machines of proxy surfing has been received；
The original position of each identity property value of the testing equipment in the identity property value sequence, end position,
The step of minimal amount for having received the number of machines that maximum/minimum value obtains proxy surfing, includes：
Using the identity property value sequence as target sequence, according to the target sequence order traversal described in target sequence,
Using the identity property value for traversing as desired value；
The desired value is taken out in the target sequence, looked-up sequence is located at after the desired value in the target sequence
, and identity property value is more than/is less than the maximum/minimum value of reception of the desired value, and original position more than desired value
The min/max identity property value of end position, if finding, using the identity property value for finding as target
Value, iteration perform described in the step of take out the desired value in target sequence；
If not finding, corresponding feature subsequence is generated according to the identity property value taken out, will be taken out after identity property value
Target sequence again as target sequence, and iteration performs target sequence described in the order traversal according to the target sequence
The step of row；
It is space-time in the target sequence, calculates the number of the feature subsequence, judges the minimum of the number of machines of proxy surfing
Number is the number of the feature subsequence.
2. it is according to claim 1 identification proxy surfing number of machines method, it is characterised in that the testing equipment to
The step of Digital ID of the client return monotonic increase or monotone decreasing, includes：
The testing equipment generates temporary page, and the temporary page includes flash resource links and shell script, described
The Digital ID of flash resource links correspondence monotonic increase or monotone decreasing；
The testing equipment is returned to the client by the way that the web access requests are redirected to into the temporary page
End.
3. it is according to claim 2 identification proxy surfing number of machines method, it is characterised in that the client is clear
The identity property value in flash cookie in device of looking at caching is that the Digital ID is write the identity property value by space-time
The step of include：
The client obtains the corresponding flash resources of flash resource links in the temporary page, by the flash
Whether the identity property value in flash cookie corresponding in resource judgment browser rs cache is empty, if so, then by institute
The Digital ID for stating monotonic increase or monotone decreasing writes the identity property value.
4. it is according to claim 2 identification proxy surfing number of machines method, it is characterised in that the testing equipment is obtained
Also include before the step of taking the identity property value of the client upload：
The client obtains the mark in flash cookie corresponding with the flash resource links by the shell script
Know property value, and send it to the testing equipment.
5. the method for the number of machines of identification proxy surfing according to claim 4, it is characterised in that the client is by institute
Also include after stating the step of the identity property value got by shell script is sent to the testing equipment：
The client refreshes browser page by the shell script, and the web access requests are initiated again.
6. a kind of system of the number of machines of identification proxy surfing, including testing equipment and client, it is characterised in that the detection
Equipment is additionally operable to periodically intercept the web access requests of client upload, and to the client monotonic increase or monotone decreasing are returned
Digital ID；
It is space-time by the number that the client is additionally operable to the identity property value in the flash cookie in browser rs cache
The word mark write identity property value；
The testing equipment is additionally operable to receive the identity property value of the client upload, obtains the identity property value under Target IP
Sequence, record successively the original position of the identity property value in the identity property value sequence, end position, received maximum/
Minimum of a value, and remove the identity property value of repetition；
The original position of each identity property value of the testing equipment in the identity property value sequence, end position,
The minimal amount that maximum/minimum value obtains the number of machines of proxy surfing has been received；
The original position of each identity property value of the testing equipment in the identity property value sequence, end position,
The step of minimal amount for having received the number of machines that maximum/minimum value obtains proxy surfing, includes：
Using the identity property value sequence as target sequence, according to the target sequence order traversal described in target sequence,
Using the identity property value for traversing as desired value；
The desired value is taken out in the target sequence, looked-up sequence is located at after the desired value in the target sequence
, and identity property value is more than/is less than the maximum/minimum value of reception of the desired value, and original position more than desired value
The min/max identity property value of end position, if finding, using the identity property value for finding as target
It is worth, the desired value is taken out in target sequence described in iteration execution；
If not finding, corresponding feature subsequence is generated according to the identity property value taken out, will be taken out after identity property value
Target sequence again as target sequence, and iteration perform according to the target sequence order traversal described in target sequence；
It is space-time in the target sequence, calculates the number of the feature subsequence, judges the minimum of the number of machines of proxy surfing
Number is the number of the feature subsequence.
7. it is according to claim 6 identification proxy surfing number of machines system, it is characterised in that the testing equipment is also
For generating temporary page, the temporary page includes flash resource links and shell script, the flash resource links
The Digital ID of correspondence monotonic increase or monotone decreasing；
The testing equipment is additionally operable to be returned to institute by the way that the web access requests are redirected to into the temporary page
State client.
8. it is according to claim 7 identification proxy surfing number of machines system, it is characterised in that the client is also used
In the corresponding flash resources of flash resource links in the temporary page are obtained, browsed by the flash resource judgments
Identity property value in device caching in corresponding flash cookie be whether it is empty, if so, then by the monotonic increase or
The Digital ID of monotone decreasing writes the identity property value.
9. it is according to claim 7 identification proxy surfing number of machines system, it is characterised in that the client is also used
Identity property value in by shell script acquisition flash cookie corresponding with the flash resource links, and
Send it to the testing equipment.
10. it is according to claim 9 identification proxy surfing number of machines system, it is characterised in that the client is also
For refreshing browser page by the shell script, the web access requests are initiated again.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410150991.1A CN103986616B (en) | 2014-04-15 | 2014-04-15 | Method and device for recognizing number of machines having access to internet through proxy |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410150991.1A CN103986616B (en) | 2014-04-15 | 2014-04-15 | Method and device for recognizing number of machines having access to internet through proxy |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN103986616A CN103986616A (en) | 2014-08-13 |
| CN103986616B true CN103986616B (en) | 2017-05-10 |
Family
ID=51278443
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410150991.1A Active CN103986616B (en) | 2014-04-15 | 2014-04-15 | Method and device for recognizing number of machines having access to internet through proxy |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103986616B (en) |
Families Citing this family (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106664223B (en) * | 2015-06-18 | 2020-03-20 | 华为技术有限公司 | Method and device for detecting number of shared access hosts |
| CN106790383B (en) * | 2016-11-23 | 2019-09-27 | 广州酷狗计算机科技有限公司 | The number of visiting people determines method and device |
| CN107769999B (en) * | 2017-12-07 | 2020-09-25 | 锐捷网络股份有限公司 | Method and device for identifying user agent internet surfing |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101895552A (en) * | 2010-07-22 | 2010-11-24 | 北京天融信科技有限公司 | Security gateway and method thereof for detecting proxy surfing |
| CN102882748A (en) * | 2012-10-23 | 2013-01-16 | 深圳中兴网信科技有限公司 | Network access detection system and network access detection method |
| CN103327036A (en) * | 2012-03-19 | 2013-09-25 | 精硕世纪科技（北京）有限公司 | Identification method of Internet browsing devices and Cookie server |
| CN103401861A (en) * | 2013-07-29 | 2013-11-20 | 深信服网络科技（深圳）有限公司 | Method and device of identifying proxy Internet |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20120317620A1 (en) * | 2011-06-13 | 2012-12-13 | Aleksey Fefelov | Website visitor identification algorithm |
-
2014
- 2014-04-15 CN CN201410150991.1A patent/CN103986616B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101895552A (en) * | 2010-07-22 | 2010-11-24 | 北京天融信科技有限公司 | Security gateway and method thereof for detecting proxy surfing |
| CN103327036A (en) * | 2012-03-19 | 2013-09-25 | 精硕世纪科技（北京）有限公司 | Identification method of Internet browsing devices and Cookie server |
| CN102882748A (en) * | 2012-10-23 | 2013-01-16 | 深圳中兴网信科技有限公司 | Network access detection system and network access detection method |
| CN103401861A (en) * | 2013-07-29 | 2013-11-20 | 深信服网络科技（深圳）有限公司 | Method and device of identifying proxy Internet |
Also Published As
| Publication number | Publication date |
|---|---|
| CN103986616A (en) | 2014-08-13 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN108206802B (en) | Method and device for detecting webpage backdoor | |
| Ihm et al. | Towards understanding modern web traffic | |
| CN103257989B (en) | Web page download time is analyzed | |
| CN103338249B (en) | Caching method and device | |
| CN103401861B (en) | Proxy surfing recognition methods and device | |
| CN103118007B (en) | A kind of acquisition methods of user access activity and system | |
| CN105337966A (en) | Processing method for network attacks and device | |
| TW201824047A (en) | Attack request determination method, apparatus and server | |
| CN108156267A (en) | Improve the method and system of website visiting time delay in a kind of mist computing architecture using caching | |
| CN109359263B (en) | User behavior feature extraction method and system | |
| CN107528812B (en) | Attack detection method and device | |
| CN110855661A (en) | WebShell detection method, device, equipment and medium | |
| CN101808018A (en) | Method and device for detecting quantity of access terminals | |
| CN106302595A (en) | A kind of method and apparatus that server is carried out physical examination | |
| CN107395553B (en) | Network attack detection method, device and storage medium | |
| CN103986616B (en) | Method and device for recognizing number of machines having access to internet through proxy | |
| CN105302801A (en) | Resource caching method and apparatus | |
| CN109145179B (en) | A kind of crawler behavioral value method and device | |
| CN105184559B (en) | A kind of payment system and method | |
| CN114466054A (en) | Data processing method, device, equipment and computer readable storage medium | |
| CN104202403B (en) | Webpage browsing acceleration method, cloud server and browser | |
| US8694659B1 (en) | Systems and methods for enhancing domain-name-server responses | |
| CN110020297A (en) | A kind of loading method of web page contents, apparatus and system | |
| CN102647463B (en) | The generation method of Web side navigation, wireless router terminal and system | |
| CN111225038B (en) | Server access method and device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| TR01 | Transfer of patent right | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20200615 Address after: Nanshan District Xueyuan Road in Shenzhen city of Guangdong province 518000 No. 1001 Nanshan Chi Park building A1 layer Patentee after: SANGFOR TECHNOLOGIES Inc. Address before: 518000 room 410, technology innovation service center, 1 Qilin Road, Shenzhen, Guangdong, Nanshan District Patentee before: Shenxin network technology (Shenzhen) Co.,Ltd. |