CN105354490A - Method and device for processing hijacked browser - Google Patents

Method and device for processing hijacked browser Download PDF

Info

Publication number
CN105354490A
CN105354490A CN201510639660.9A CN201510639660A CN105354490A CN 105354490 A CN105354490 A CN 105354490A CN 201510639660 A CN201510639660 A CN 201510639660A CN 105354490 A CN105354490 A CN 105354490A
Authority
CN
China
Prior art keywords
browser
hostage
held
pages
web page
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201510639660.9A
Other languages
Chinese (zh)
Other versions
CN105354490B (en
Inventor
高庆光
贾正强
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Qihoo Technology Co Ltd
Original Assignee
Beijing Qihoo Technology Co Ltd
Qizhi Software Beijing Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Qihoo Technology Co Ltd, Qizhi Software Beijing Co Ltd filed Critical Beijing Qihoo Technology Co Ltd
Priority to CN201510639660.9A priority Critical patent/CN105354490B/en
Publication of CN105354490A publication Critical patent/CN105354490A/en
Priority to PCT/CN2016/100574 priority patent/WO2017054731A1/en
Application granted granted Critical
Publication of CN105354490B publication Critical patent/CN105354490B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55Detecting local intrusion or implementing counter-measures
    • G06F21/554Detecting local intrusion or implementing counter-measures involving event detection and direct action
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/03Indexing scheme relating to G06F21/50, monitoring users, programs or devices to maintain the integrity of platforms
    • G06F2221/034Test or assess a computer or a system

Abstract

The present invention discloses a method and a device for processing a hijacked browser. The method comprises: identifying whether a browser is hijacked; when identifying that the browser is hijacked, acquiring identification information of an original webpage which is not hijacked and corresponds to a hijacked webpage loaded onto the browser; according to the identification information of the original webpage, acquiring address information of the original webpage from a local storage device; based on the address information, acquiring page contents of the original webpage; and loading the page contents in the browser to display the page contents. The method and the device for processing the hijacked browser, which are disclosed by the present invention, solve the technical problem of long processing time of a processing method when a browser is hijacked in the prior art, and realizes the technical effects of shortening processing time and improving the utilization rate of the browser in the process of processing the hijacked browser.

Description

A kind of process is held as a hostage the method and apparatus of browser
Technical field
The present invention relates to computer network technical field, be specifically related to a kind of process and be held as a hostage the method and apparatus of browser.
Background technology
Along with developing rapidly of internet, browser provides rich and varied function, can various information required for fast finding data and individual on the net for user.But, in reality, browser can pass through browser plug-in, browser auxiliary object (BrowserHelperObject, be called for short BHO), the form such as WinsockLSP distorts browser, thus browser is held as a hostage, and when browser is held as a hostage, homepage and the internet hunt page of browser can become nameless website, be diverted into malicious web pages when accessing normal website, browser speed when kidnapping website and input character that software specifies that is transferred to when the network address of input error seriously slows down.Because these browsers of being held as a hostage cause harmful effect to daily the browsing of user, the work that therefore network security tool one is very important is exactly, and needs the browser of being held as a hostage existed in network to identify.
In prior art, when browser is held as a hostage, usually process in the following ways: one, unloading browser of resetting; Two, killed virus by antivirus software; Its processing time of above-mentioned disposal route is longer, and browser can be caused not use when resetting browser, so, the method for being held as a hostage at process browser in prior art is made to there is processing time length and the problem that the utilization rate of browser reduces in browser process is held as a hostage in process.
Summary of the invention
The method and apparatus that the embodiment of the present application is held as a hostage browser by providing a kind of process, there is the technical matters of processing time length in the disposal route solved in prior art when browser is held as a hostage, achieves the technique effect shortening the processing time and improve the utilization rate of browser in browser process is held as a hostage in process.
On the one hand, the application provides following technical scheme by an embodiment of the application:
This application discloses a kind of method processing browser and be held as a hostage, comprising:
Identify whether browser is held as a hostage;
When identifying described browser and being held as a hostage, obtain the identification information of the original web page of not being held as a hostage corresponding to the webpage of being held as a hostage be carried on described browser;
According to the identification information of described original web page, from local memory device, obtain the address information of described original web page;
Based on described address information, obtain the content of pages of described parent page;
Described content of pages is loaded, to show described content of pages in described browser.
Optionally, described from local memory device, obtain the address information of described original web page before, described method also comprises:
In described local memory device, store the address information of preset web in advance, in described preset web, include described original web page.
Optionally, described acquisition is carried in the flag information of the original web page of not being held as a hostage corresponding to webpage of being held as a hostage on described browser, and specifically comprises:
The jump information that webpage of being held as a hostage described in acquisition is corresponding;
Based on described jump information, the flag information of the original web page of not being held as a hostage described in acquisition, described flag information comprises the title of described original web page.
Optionally, described local memory device comprises the user terminal installing described browser and the home server be connected with described user terminal.
Optionally, describedly in described browser, load described content of pages, specifically comprise:
Described content of pages is loaded, the displaying contents of webpage of being held as a hostage described in being covered by described content of pages in described browser.
Optionally, describedly in described browser, load described content of pages, specifically comprise:
In described browser, load described content of pages, the displaying contents of described webpage of being held as a hostage is replaced with described content of pages.
On the other hand, the application, by an embodiment of the application, provides following technical scheme:
Disclosed herein as well is a kind of equipment processing browser and be held as a hostage, described equipment comprises:
Recognition unit, for identifying whether browser is held as a hostage;
Original web page acquiring unit, for when identifying described browser and being held as a hostage, obtains the identification information of the original web page of not being held as a hostage corresponding to the webpage of being held as a hostage be carried on described browser;
Address information acquiring unit, for the identification information according to described original web page, obtains the address information of described original web page from local memory device;
Content of pages acquiring unit, for based on described address information, obtains the content of pages of described parent page;
Loading unit, for loading described content of pages in described browser, to show described content of pages loading unit.
Optionally, described equipment also comprises:
Prestore unit, for described from local memory device, obtain the address information of described original web page before, in described local memory device, store the address information of preset web in advance, in described preset web, include described original web page.
Optionally, described equipment also comprises:
Jump information acquiring unit, for the jump information that webpage of being held as a hostage described in obtaining is corresponding;
Address information acquiring unit, for based on described jump information, the flag information of the original web page of not being held as a hostage described in acquisition, described flag information comprises the title of described original web page
Optionally, described loading unit, specifically for loading described content of pages in described browser, and the displaying contents of webpage of being held as a hostage described in described content of pages is covered.
Optionally, described loading unit, specifically for loading described content of pages in described browser, and replaces with described content of pages by the displaying contents of described webpage of being held as a hostage.
The one or more technical schemes provided in the embodiment of the present application, at least have following technique effect or advantage:
A kind of process according to the present invention is held as a hostage the method and apparatus of browser, pass through the present invention, first identify whether browser is held as a hostage, when identifying described browser and being held as a hostage, obtain the identification information of the original web page of not being held as a hostage corresponding to the webpage of being held as a hostage be carried on described browser; According to described identification information, from local memory device, obtain the address information of described original web page; Based on described address information, obtain and load the content of pages of described parent page, to show described content of pages, so, be held as a hostage identifying described browser, the content of pages that directly can obtain described original web page from described local memory device loads, make browser can show the content of pages of described original web page immediately, shorten the processing time, and still can browser be used in processing procedure, improve the utilization rate of browser in browser process is held as a hostage in process.
Above-mentioned explanation is only the general introduction of technical solution of the present invention, in order to technological means of the present invention can be better understood, and can be implemented according to the content of instructions, and can become apparent, below especially exemplified by the specific embodiment of the present invention to allow above and other objects of the present invention, feature and advantage.
Accompanying drawing explanation
In order to be illustrated more clearly in the technical scheme in the embodiment of the present invention, below the accompanying drawing used required in describing embodiment is briefly described, apparently, accompanying drawing in the following describes is some embodiments of the present invention, for those of ordinary skill in the art, under the prerequisite not paying creative work, other accompanying drawing can also be obtained according to these accompanying drawings.
Fig. 1 to be held as a hostage the process flow diagram of method of browser for process that the embodiment of the present invention provides;
Fig. 2 to be held as a hostage the module map of equipment of browser for process that the embodiment of the present invention provides.
Embodiment
The method and apparatus that the embodiment of the present application is held as a hostage browser by providing a kind of process, there is the technical matters of processing time length in the disposal route solved in prior art when browser is held as a hostage, achieves the technique effect shortening the processing time and improve the utilization rate of browser in browser process is held as a hostage in process.
In order to better understand technique scheme, below in conjunction with Figure of description and concrete embodiment, technique scheme is described in detail.
See Fig. 1, the be held as a hostage method of browser of the process that the embodiment of the present invention provides comprises the following steps:
S101: identify whether browser is held as a hostage;
S102: when identifying described browser and being held as a hostage, obtains the identification information of the original web page of not being held as a hostage corresponding to the webpage of being held as a hostage be carried on described browser;
S103: according to the identification information of described original web page, obtains the address information of described original web page from local memory device;
S104: based on described address information, obtains the content of pages of described parent page;
S105: load described content of pages in described browser, to show described content of pages.
Wherein, in step S101, the executive agent of the application can be the equipment being provided with described browser, can be described browser, the application do concrete restriction, wherein yet, when identifying that described browser is held as a hostage, whether can identify described browser by three kinds of methods to be held as a hostage, the first recognition methods, can be specifically the operation information obtaining web access requests and correspondence thereof; Detect described operation information again and whether meet preset rules, described preset rules comprises the operation requests that described browser allows; Described browser, when detecting that described operation information does not meet described preset rules, identifies described browser and is held as a hostage; When described browser detects that described operation information meets described preset rules, identify described browser and be not held as a hostage.
Wherein, after described browser starts, the operation information of user can be received, based on described operation information, described browser can automatically generate and get the web access requests corresponding with described operation information, so, make described browser can get the operation information of described web access requests and correspondence thereof, wherein, described operation information can be such as the information of the hyperlink on the navigation page of user's click browser, can also be the information of inputted search information in the search column of browser, certainly, the executive agent of the first recognition methods described can also be equipment.
Such as, for a browser, after a browser starts, receive the search information that user have input www.axxx.com in the search column of a browser, the web access requests that a browser generates access www.axxx.com based on this operation information such as includes Stringurl=" http://www.axxx.com/ ", so, make a browser can receive the access web access requests of www.axxx.com and the operation information of correspondence thereof, described operation information is the information inputting www.axxx.com in the search column of a browser, preset rules due to a browser is the first operation requests of inputted search information in the search column of browser and the hyperlink on the navigation page of browser is clicked to the second operation requests generated, because described operation information and the first operation requests described match, then determine that described operation information meets described preset rules, namely a browser is not held as a hostage to make a browser to judge, so, described browser is improved identifying the accuracy whether described browser be held as a hostage according to described judged result, and described browser judges whether voluntarily to be held as a hostage, compared with artificial judgment of the prior art, its work efficiency judged also can be greatly improved.
Specifically, the second recognition methods, can be specifically identify whether described browser is held as a hostage by domain name, its concrete implementation step be as follows: browser obtains the web access requests of navigation page, and obtains the target domain name corresponding with described web access requests; Described browser judges that whether described target domain name is consistent with the original domain name of described navigation page; Described browser when judging that described target domain name is consistent with described original domain name, then identifies described browser and is not held as a hostage; Described browser when judging described target domain name and described original domain name is inconsistent, then identifies described browser and is held as a hostage.
Wherein, described browser can load navigation page automatically when starting, and makes described browser can get the web access requests of described navigation page, then according to described web access requests, obtains described target domain name; Certainly, described browser after start-up, described browser receives user when starting the startup request of described navigation page, described browser loads described navigation page according to described startup request, and then gets the web access requests of described navigation page, then according to described web access requests, obtain described target domain name, judge that whether described target domain name is consistent with described original domain name again, certainly, the executive agent of the first recognition methods described can also be equipment.
Such as, for a browser, automatically can load a navigation page when a browser starts, a browser is when loading a navigation page, and the web access requests that can generate a navigation page such as includes Stringurl=" http://hao.bxxx.cn/ "; So, make browser can extract aiming field from the web access requests of a navigation page and be called hao.bxxx.cn, if the original domain name being previously stored with a navigation page in a browser is hao.axxx.cn, because hao.bxxx.cn and hao.axxx.cn is different, namely a browser judge described target domain name and described original domain name inconsistent, then make a browser detect described judged result characterize described target domain name and described original domain name inconsistent, thus identify a browser and be held as a hostage; If the original domain name being previously stored with a navigation page in a browser is hao.bxxx.cn, because described original domain name is identical with described aiming field name, namely a browser judges that described target domain name is consistent with described original domain name, a browser is detected, and that described judged result characterizes described target domain name is consistent with described original domain name, thus identifies a browser and be not held as a hostage.
Specifically, the third recognition method, whether can be specifically carry out described browser by the parameter setting information of the order line of shortcut to be held as a hostage, its concrete implementation step be as follows: the parameter setting information obtaining the order line of the shortcut of described browser; Judge that whether set-up mode corresponding to described parameter setting information be consistent with predetermined manner; When judging described set-up mode and described predetermined manner is inconsistent, identifying described browser and being held as a hostage; When judging that described set-up mode is consistent with described predetermined manner, identifying described browser and not being held as a hostage.
Wherein, the executive agent of described 3rd recognition method is equipment, described equipment can be such as panel computer, notebook computer, smart mobile phone, the equipment such as desktop computer, in described equipment, browser is installed, when the parameter setting information of the order line of the shortcut of acquisition browser, can by starting the order line program of installing in the apparatus, such as under windows environment, order line program is generally cmd.exe, then described equipment is when receiving corresponding with the immediate mode of the browser command information of user's input, described parameter setting information is presented in described order line program, so, according to described displaying contents, described parameter setting information can be obtained, wherein, the set-up mode information of described shortcut is included in described parameter setting information.Certainly, described parameter setting information can also be obtained by the attribute information of the shortcut of checking described browser, further, described predetermined manner is the set-up mode of the acquiescence of the shortcut of described browser, can be specifically manual set-up mode or Automatic Styles.
Such as, for notebook computer A, b browser is installed in notebook computer A and creates the shortcut of b browser, in the search column of the start menu of notebook computer A, the information of cmd is have input according to the user received, then start cmd.exe, then when the command information corresponding according to the shortcut of the search b browser received, parameter setting information corresponding for the shortcut of b browser is presented in cmd.exe, so, notebook computer A is made to get described parameter setting information, if when set-up mode corresponding to the shortcut of the set-up mode information displaying b browser of the described shortcut comprised in described parameter setting information is manual set-up mode, because manual set-up mode is identical with described predetermined manner, then determine that described set-up mode is consistent with described predetermined manner, so, can determine that b browser is not held as a hostage, if when set-up mode corresponding to the shortcut of b browser is Automatic Styles, because Automatic Styles is different from described predetermined manner, then determine described set-up mode and described predetermined manner inconsistent, so, can determine that b browser is held as a hostage.
Wherein, when b browser is not held as a hostage, the set-up mode that the shortcut of b browser is corresponding must be described predetermined manner, and when b browser is held as a hostage, whether set-up mode corresponding to the shortcut of b browser just can be different from described predetermined manner, so, consistent with described predetermined manner by judging set-up mode corresponding to the shortcut of b browser, namely can judge whether b browser is held as a hostage accurately, the accuracy judged is improved.
Following execution step S102, in this step, when identifying described browser and being held as a hostage, obtains the identification information of the original web page of not being held as a hostage corresponding to the webpage of being held as a hostage be carried on described browser.
Wherein, webpage after what described webpage of being held as a hostage referred to be held as a hostage, described original web page of not being held as a hostage refers to the webpage before not being held as a hostage, such as, for a browser, a browser receives user when clicking the button of the automatic a navigation page of a browser, a browser loads a navigation page automatically, but at this moment a browser is held as a hostage, and a navigation page of loading is kidnapped b navigation page, make the content of pages of the b navigation page shown on a browser, wherein, a navigation page for described in the original web page of not being held as a hostage, and b navigation page for described in be held as a hostage webpage.
In specific implementation process, when being identified described browser by step S101 and being held as a hostage, the jump information that webpage of being held as a hostage described in can obtaining is corresponding, based on described jump information, the identification information of the original web page of not being held as a hostage described in acquisition, wherein, the information of webpage of being held as a hostage described in jumping to from described original web page is included in described jump information, make in described jump information, to include the information such as the title of described original web page and the title of described webpage of being held as a hostage, so, the identification information of described original web page can be got from described jump information, described identification information comprises the title of described original web page, certainly, when identifying described browser and being held as a hostage, the run time version corresponding with described webpage of being held as a hostage can also be obtained, according to described run time version, obtain the identification information of described original web page.
Such as, for a browser, a browser identifies a browser when being held as a hostage, obtaining the page of being held as a hostage be carried on a browser is c navigation page, to be held as a hostage described in c navigation page is webpage, obtain the jump information that c navigation page is corresponding, if the information jumping to c navigation page from a navigation page comprised in described jump information, the identification information getting a navigation page according to described jump information is a.
Following execution step S103, in this step, according to the identification information of described original web page, obtains the address information of described original web page from local memory device.
In specific implementation process, the address information of preset web can be stored in advance in described local memory device, described preset web comprises the webpage and a large amount of well-known webpages that user commonly uses, make to include described original web page in described preset web, and the address information of described preset web is stored in described local memory device, so, with the part or all of content in the identification information of described original web page for keyword is searched in described local memory device, search the address information that the address information matched with described identification information is described original web page, wherein, described address information can be such as the URL of described original web page.
Specifically, index can be set up to the address information of the described default page, to make, when finding corresponding address information according to the identification information of described original web page, the address information of described original web page to be found faster by index, improve the efficiency of searching; Certainly, also can be all address informations stored in the described local memory device of traversal, then the address information of described original web page is found, wherein, the name of each page in the described default page can be referred to as filename, so, searched for by the identification information of described original web page, the address information of described original web page can be obtained fast.
Such as, for a browser, a browser identifies a browser when being held as a hostage, obtaining the page of being held as a hostage be carried on a browser is c navigation page, to be held as a hostage described in c navigation page is webpage, obtain the jump information that c navigation page is corresponding, if the information jumping to c navigation page from a navigation page comprised in described jump information, the identification information getting a navigation page according to described jump information is a, think that the keyword of a is searched in the address information of the default page then stored from the panel computer A being provided with a browser, find corresponding address information, the address information being a navigation page is such as http://hao.axxx.cn/.
Following execution step S104, in this step, based on described address information, obtains the content of pages of described parent page.
In specific implementation process, after getting described address information by step S104, the request of access of the described original web page of access is generated according to described address information, return the content of pages of described original web page when making the server storing described original web page receive described request of access to described browser, thus the content of pages of described original web page can be got.
Such as, for a browser, a browser identifies a browser when being held as a hostage, obtaining the page of being held as a hostage be carried on a browser is c navigation page, to be held as a hostage described in c navigation page is webpage, obtain the jump information that c navigation page is corresponding, if the information jumping to c navigation page from a navigation page comprised in described jump information, the identification information getting a navigation page according to described jump information is a, think that the keyword of a is searched in the address information of the default page then stored from the panel computer A being provided with a browser, find corresponding address information, the address information being a navigation page is such as http://hao.axxx.cn/, then the request of access of access a navigation page is generated, make the server storing a navigation page according to described request of access, the content of pages of a navigation page is returned to a browser, make a browser can get the content of pages of a navigation page.
Following execution step S105, in this step, loads described content of pages in described browser, to show described content of pages.
In specific implementation process, described content of pages can be loaded in described browser, the displaying contents of webpage of being held as a hostage described in being covered by described content of pages; Also described content of pages can be loaded in described browser, the displaying contents of described webpage of being held as a hostage is replaced with described content of pages, all can be loaded the content of pages of described original web page on described browser by these two kinds of modes, make browser can show the content of pages of described original web page immediately, shorten the processing time, and still can browser be used in processing procedure, improve the utilization rate of browser in browser process is held as a hostage in process.
Specifically, after the content of pages being got described parent page by step S104, directly on described browser, load described content of pages and show, the demand of content and the user shown is matched.
Such as, for a browser, a browser identifies a browser when being held as a hostage, obtaining the page of being held as a hostage be carried on a browser is c navigation page, to be held as a hostage described in c navigation page is webpage, obtain the jump information that c navigation page is corresponding, if the information jumping to c navigation page from a navigation page comprised in described jump information, the identification information getting a navigation page according to described jump information is a, think that the keyword of a is searched in the address information of the default page then stored from the panel computer A being provided with a browser, find corresponding address information, the address information being a navigation page is such as http://hao.axxx.cn/, then the request of access of access a navigation page is generated, make the server storing a navigation page according to described request of access, the content of pages of a navigation page is returned to a browser, make a browser can get the content of pages of a navigation page, then the direct content of pages by a navigation page of acquisition is carried on a browser, the content of pages of a navigation page is made to cover the content of pages of c navigation page, so, make the content of pages being still a navigation page shown on a browser, thus to solve on a browser the problem of to be held as a hostage described in display webpage and c navigation page, shorten the processing time, and still a browser can be used in processing procedure, improve the utilization rate of a browser in a browser process is held as a hostage in process.
The one or more technical schemes provided in the embodiment of the present application, at least have following technique effect or advantage:
A kind of process according to the present invention is held as a hostage the method for browser, pass through the present invention, first identify whether browser is held as a hostage, when identifying described browser and being held as a hostage, obtain the identification information of the original web page of not being held as a hostage corresponding to the webpage of being held as a hostage be carried on described browser; According to described identification information, from local memory device, obtain the address information of described original web page; Based on described address information, obtain and load the content of pages of described parent page, to show described content of pages, so, be held as a hostage identifying described browser, the content of pages that directly can obtain described original web page from described local memory device loads, make browser can show the content of pages of described original web page immediately, shorten the processing time, and still can browser be used in processing procedure, improve the utilization rate of browser in browser process is held as a hostage in process.
According to same inventive concept, another embodiment of the application provides a kind of equipment processing browser and be held as a hostage, and see Fig. 2, described equipment comprises:
Recognition unit 201, for identifying whether browser is held as a hostage;
Original web page acquiring unit 202, for when identifying described browser and being held as a hostage, obtains the identification information of the original web page of not being held as a hostage corresponding to the webpage of being held as a hostage be carried on described browser;
Address information acquiring unit 203, for the identification information according to described original web page, obtains the address information of described original web page from local memory device;
Content of pages acquiring unit 204, for based on described address information, obtains the content of pages of described parent page;
Loading unit 205, for loading described content of pages in described browser, to show described content of pages in described browser.
Wherein, whether described equipment, when identifying that described browser is held as a hostage, can identify described browser by three kinds of methods and be held as a hostage, the first recognition methods, can be specifically the operation information obtaining web access requests and correspondence thereof; Detect described operation information again and whether meet preset rules, described preset rules comprises the operation requests that described browser allows; When detecting that described operation information does not meet described preset rules, identifying described browser and being held as a hostage; When detecting that described operation information meets described preset rules, identifying described browser and not being held as a hostage.
Specifically, the second recognition methods, can be specifically identify whether described browser is held as a hostage by domain name, its concrete implementation step be as follows: described equipment obtains the web access requests of navigation page, and obtains the target domain name corresponding with described web access requests; Judge that whether described target domain name is consistent with the original domain name of described navigation page; When judging that described target domain name is consistent with described original domain name, then identify described browser and be not held as a hostage; When judging described target domain name and described original domain name is inconsistent, then identify described browser and be held as a hostage.
Concrete, the third recognition method, whether can be specifically carry out described browser by the parameter setting information of the order line of shortcut to be held as a hostage, its concrete implementation step be as follows: described equipment obtains the parameter setting information of the order line of the shortcut of described browser; Judge that whether set-up mode corresponding to described parameter setting information be consistent with predetermined manner; When judging described set-up mode and described predetermined manner is inconsistent, identifying described browser and being held as a hostage; When judging that described set-up mode is consistent with described predetermined manner, identifying described browser and not being held as a hostage.
Concrete, described equipment also comprises:
Prestore unit 206, for described from local memory device, obtain the address information of described original web page before, in described local memory device, store the address information of preset web in advance, in described preset web, include described original web page
Concrete, described equipment also comprises:
Jump information acquiring unit 207, for the jump information that webpage of being held as a hostage described in obtaining is corresponding;
Original web page acquiring unit 202, specifically for based on described jump information, the identification information of the original web page of not being held as a hostage described in acquisition, described flag information comprises the title of described original web page.
Concrete, described local memory device comprises the user terminal installing described browser and the home server be connected with described user terminal.
Concrete, loading unit 205, specifically for loading described content of pages in described browser, and the displaying contents of webpage of being held as a hostage described in described content of pages is covered.
Concrete, loading unit 205, specifically for loading described content of pages in described browser, and replaces with described content of pages by the displaying contents of described webpage of being held as a hostage.
Technical scheme in above-mentioned the embodiment of the present application, at least has following technique effect or advantage:
A kind of process according to the present invention is held as a hostage the equipment of browser, pass through the present invention, first identify whether browser is held as a hostage, when identifying described browser and being held as a hostage, obtain the identification information of the original web page of not being held as a hostage corresponding to the webpage of being held as a hostage be carried on described browser; According to described identification information, from local memory device, obtain the address information of described original web page; Based on described address information, obtain and load the content of pages of described parent page, to show described content of pages, so, be held as a hostage identifying described browser, the content of pages that directly can obtain described original web page from described local memory device loads, make browser can show the content of pages of described original web page immediately, shorten the processing time, and still can browser be used in processing procedure, improve the utilization rate of browser in browser process is held as a hostage in process.
Those skilled in the art should understand, embodiments of the invention can be provided as method, system or computer program.Therefore, the present invention can adopt the form of complete hardware embodiment, completely software implementation or the embodiment in conjunction with software and hardware aspect.And the present invention can adopt in one or more form wherein including the upper computer program implemented of computer-usable storage medium (including but not limited to magnetic disk memory, CD-ROM, optical memory etc.) of computer usable program code.
The present invention describes with reference to according to the process flow diagram of the method for the embodiment of the present invention, equipment (system) and computer program and/or block scheme.Should understand can by the combination of the flow process in each flow process in computer program instructions realization flow figure and/or block scheme and/or square frame and process flow diagram and/or block scheme and/or square frame.These computer program instructions can being provided to the processor of multi-purpose computer, special purpose computer, Embedded Processor or other programmable data processing device to produce a machine, making the instruction performed by the processor of computing machine or other programmable data processing device produce device for realizing the function of specifying in process flow diagram flow process or multiple flow process and/or block scheme square frame or multiple square frame.
These computer program instructions also can be stored in can in the computer-readable memory that works in a specific way of vectoring computer or other programmable data processing device, the instruction making to be stored in this computer-readable memory produces the manufacture comprising command device, and this command device realizes the function of specifying in process flow diagram flow process or multiple flow process and/or block scheme square frame or multiple square frame.
These computer program instructions also can be loaded in computing machine or other programmable data processing device, make on computing machine or other programmable devices, to perform sequence of operations step to produce computer implemented process, thus the instruction performed on computing machine or other programmable devices is provided for the step realizing the function of specifying in process flow diagram flow process or multiple flow process and/or block scheme square frame or multiple square frame.
Although describe the preferred embodiments of the present invention, those skilled in the art once obtain the basic creative concept of cicada, then can make other change and amendment to these embodiments.So claims are intended to be interpreted as comprising preferred embodiment and falling into all changes and the amendment of the scope of the invention.
Obviously, those skilled in the art can carry out various change and modification to the present invention and not depart from the spirit and scope of the present invention.Like this, if these amendments of the present invention and modification belong within the scope of the claims in the present invention and equivalent technologies thereof, then the present invention is also intended to comprise these change and modification.
The present invention open A1, a kind of method processing browser and be held as a hostage, is characterized in that, comprising:
Identify whether browser is held as a hostage;
When identifying described browser and being held as a hostage, obtain the identification information of the original web page of not being held as a hostage corresponding to the webpage of being held as a hostage be carried on described browser;
According to the identification information of described original web page, from local memory device, obtain the address information of described original web page;
Based on described address information, obtain the content of pages of described parent page;
Described content of pages is loaded, to show described content of pages in described browser.
A2, method as described in claim A1, is characterized in that, described from local memory device, obtain the address information of described original web page before, described method also comprises:
In described local memory device, store the address information of preset web in advance, in described preset web, include described original web page.
A3, method as described in claim A1, is characterized in that, described acquisition is carried in the flag information of the original web page of not being held as a hostage corresponding to webpage of being held as a hostage on described browser, and specifically comprises:
The jump information that webpage of being held as a hostage described in acquisition is corresponding;
Based on described jump information, the flag information of the original web page of not being held as a hostage described in acquisition, described flag information comprises the title of described original web page.
A4, method as described in claim A1, it is characterized in that, described local memory device comprises the user terminal installing described browser and the home server be connected with described user terminal.
A5, method as described in claim A1 ~ any one of A4, is characterized in that, describedly in described browser, loads described content of pages, specifically comprises:
Described content of pages is loaded, the displaying contents of webpage of being held as a hostage described in being covered by described content of pages in described browser.
A6, method as described in claim A1 ~ any one of A4, is characterized in that, describedly in described browser, loads described content of pages, specifically comprises:
In described browser, load described content of pages, the displaying contents of described webpage of being held as a hostage is replaced with described content of pages.
B7, a kind of equipment processing browser and be held as a hostage, it is characterized in that, described equipment comprises:
Recognition unit, for identifying whether browser is held as a hostage;
Original web page acquiring unit, for when identifying described browser and being held as a hostage, obtains the identification information of the original web page of not being held as a hostage corresponding to the webpage of being held as a hostage be carried on described browser;
Address information acquiring unit, for the identification information according to described original web page, obtains the address information of described original web page from local memory device;
Content of pages acquiring unit, for based on described address information, obtains the content of pages of described parent page;
Loading unit, for loading described content of pages in described browser, to show described content of pages loading unit.
B8, equipment as described in claim B7, it is characterized in that, described equipment also comprises:
Prestore unit, for described from local memory device, obtain the address information of described original web page before, in described local memory device, store the address information of preset web in advance, in described preset web, include described original web page.
B9, equipment as described in claim B7, it is characterized in that, described equipment also comprises:
Jump information acquiring unit, for the jump information that webpage of being held as a hostage described in obtaining is corresponding;
Address information acquiring unit, for based on described jump information, the flag information of the original web page of not being held as a hostage described in acquisition, described flag information comprises the title of described original web page
B10, equipment as described in claim B7 ~ any one of B9, is characterized in that, described loading unit, specifically for loading described content of pages in described browser, and the displaying contents of webpage of being held as a hostage described in described content of pages is covered.
B11, equipment as described in claim B7 ~ any one of B9, is characterized in that, described loading unit, specifically for loading described content of pages in described browser, and the displaying contents of described webpage of being held as a hostage being replaced with described content of pages.

Claims (10)

1. process the method that browser is held as a hostage, it is characterized in that, comprising:
Identify whether browser is held as a hostage;
When identifying described browser and being held as a hostage, obtain the identification information of the original web page of not being held as a hostage corresponding to the webpage of being held as a hostage be carried on described browser;
According to the identification information of described original web page, from local memory device, obtain the address information of described original web page;
Based on described address information, obtain the content of pages of described parent page;
Described content of pages is loaded, to show described content of pages in described browser.
2. the method for claim 1, is characterized in that, described from local memory device, obtain the address information of described original web page before, described method also comprises:
In described local memory device, store the address information of preset web in advance, in described preset web, include described original web page.
3. the method for claim 1, is characterized in that, described acquisition is carried in the flag information of the original web page of not being held as a hostage corresponding to webpage of being held as a hostage on described browser, and specifically comprises:
The jump information that webpage of being held as a hostage described in acquisition is corresponding;
Based on described jump information, the flag information of the original web page of not being held as a hostage described in acquisition, described flag information comprises the title of described original web page.
4. the method for claim 1, is characterized in that, described local memory device comprises the user terminal installing described browser and the home server be connected with described user terminal.
5. the method as described in any one of Claims 1 to 4, is characterized in that, describedly in described browser, loads described content of pages, specifically comprises:
Described content of pages is loaded, the displaying contents of webpage of being held as a hostage described in being covered by described content of pages in described browser.
6. the method as described in any one of Claims 1 to 4, is characterized in that, describedly in described browser, loads described content of pages, specifically comprises:
In described browser, load described content of pages, the displaying contents of described webpage of being held as a hostage is replaced with described content of pages.
7. process the equipment that browser is held as a hostage, it is characterized in that, described equipment comprises:
Recognition unit, for identifying whether browser is held as a hostage;
Original web page acquiring unit, for when identifying described browser and being held as a hostage, obtains the identification information of the original web page of not being held as a hostage corresponding to the webpage of being held as a hostage be carried on described browser;
Address information acquiring unit, for the identification information according to described original web page, obtains the address information of described original web page from local memory device;
Content of pages acquiring unit, for based on described address information, obtains the content of pages of described parent page;
Loading unit, for loading described content of pages in described browser, to show described content of pages loading unit.
8. equipment as claimed in claim 7, it is characterized in that, described equipment also comprises:
Prestore unit, for described from local memory device, obtain the address information of described original web page before, in described local memory device, store the address information of preset web in advance, in described preset web, include described original web page.
9. equipment as claimed in claim 7, it is characterized in that, described equipment also comprises:
Jump information acquiring unit, for the jump information that webpage of being held as a hostage described in obtaining is corresponding;
Address information acquiring unit, for based on described jump information, the flag information of the original web page of not being held as a hostage described in acquisition, described flag information comprises the title of described original web page.
10. the equipment as described in any one of claim 7 ~ 9, is characterized in that, described loading unit, specifically for loading described content of pages in described browser, and the displaying contents of webpage of being held as a hostage described in described content of pages is covered.
CN201510639660.9A 2015-09-30 2015-09-30 Method and equipment for processing hijacked browser Active CN105354490B (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
CN201510639660.9A CN105354490B (en) 2015-09-30 2015-09-30 Method and equipment for processing hijacked browser
PCT/CN2016/100574 WO2017054731A1 (en) 2015-09-30 2016-09-28 Method and device for processing hijacked browser

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201510639660.9A CN105354490B (en) 2015-09-30 2015-09-30 Method and equipment for processing hijacked browser

Publications (2)

Publication Number Publication Date
CN105354490A true CN105354490A (en) 2016-02-24
CN105354490B CN105354490B (en) 2020-07-28

Family

ID=55330461

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201510639660.9A Active CN105354490B (en) 2015-09-30 2015-09-30 Method and equipment for processing hijacked browser

Country Status (1)

Country Link
CN (1) CN105354490B (en)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2017054731A1 (en) * 2015-09-30 2017-04-06 北京奇虎科技有限公司 Method and device for processing hijacked browser
WO2017054716A1 (en) * 2015-09-30 2017-04-06 北京奇虎科技有限公司 Method for recognizing hijacked browser and browser
CN107038194A (en) * 2016-11-17 2017-08-11 阿里巴巴集团控股有限公司 A kind of method for page jump and device
CN108595957A (en) * 2018-05-02 2018-09-28 腾讯科技(深圳)有限公司 Main browser page altering detecting method, device and storage medium

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20120180129A1 (en) * 2007-06-20 2012-07-12 Amichai Shulman System and method for preventing web frauds committed using client-scripting attacks
CN102594934A (en) * 2011-12-30 2012-07-18 奇智软件(北京)有限公司 Method and device for identifying hijacked website
CN103699840A (en) * 2013-12-12 2014-04-02 北京奇虎科技有限公司 Method and device for detecting page jacking
CN104125121A (en) * 2014-08-15 2014-10-29 携程计算机技术(上海)有限公司 Network hijacking behavior detecting system and method
CN104679747A (en) * 2013-11-26 2015-06-03 腾讯科技(深圳)有限公司 Detection device and method for website redirection

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20120180129A1 (en) * 2007-06-20 2012-07-12 Amichai Shulman System and method for preventing web frauds committed using client-scripting attacks
CN102594934A (en) * 2011-12-30 2012-07-18 奇智软件(北京)有限公司 Method and device for identifying hijacked website
CN104679747A (en) * 2013-11-26 2015-06-03 腾讯科技(深圳)有限公司 Detection device and method for website redirection
CN103699840A (en) * 2013-12-12 2014-04-02 北京奇虎科技有限公司 Method and device for detecting page jacking
CN104125121A (en) * 2014-08-15 2014-10-29 携程计算机技术(上海)有限公司 Network hijacking behavior detecting system and method

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2017054731A1 (en) * 2015-09-30 2017-04-06 北京奇虎科技有限公司 Method and device for processing hijacked browser
WO2017054716A1 (en) * 2015-09-30 2017-04-06 北京奇虎科技有限公司 Method for recognizing hijacked browser and browser
CN107038194A (en) * 2016-11-17 2017-08-11 阿里巴巴集团控股有限公司 A kind of method for page jump and device
CN108595957A (en) * 2018-05-02 2018-09-28 腾讯科技(深圳)有限公司 Main browser page altering detecting method, device and storage medium
CN108595957B (en) * 2018-05-02 2023-04-14 腾讯科技(深圳)有限公司 Browser homepage tampering detection method, device and storage medium

Also Published As

Publication number Publication date
CN105354490B (en) 2020-07-28

Similar Documents

Publication Publication Date Title
US10733259B2 (en) Web page access method and apparatus
CN108628751B (en) Useless dependency item detection method and device
CN102333122B (en) Downloaded resource provision method, device and system
CN102567516B (en) Script loading method and device
WO2014139300A1 (en) Method and device for loading a plug-in
CN105160246A (en) Method for identifying hijacked browser and browser
CN107133165B (en) Browser compatibility detection method and device
CN102664925B (en) A kind of method of displaying searching result and device
KR102090982B1 (en) How to identify malicious websites, devices and computer storage media
CN109522500B (en) Webpage display method, device, terminal and storage medium
CN105989083B (en) Method and device for switching access environment
US20190205546A1 (en) Web page processing method and apparatus, and storage medium
CN105354490A (en) Method and device for processing hijacked browser
CN114900546B (en) Data processing method, device and equipment and readable storage medium
CN105243134A (en) Method and equipment for processing hijacked browser
CN111679828B (en) Data processing method and device, electronic equipment and storage medium
WO2017054716A1 (en) Method for recognizing hijacked browser and browser
EP2998885A1 (en) Method and device for information search
WO2017054731A1 (en) Method and device for processing hijacked browser
CN105224653A (en) Disposal route when a kind of browser is held as a hostage and treatment facility
CN111124545A (en) Application program starting method and device, electronic equipment and storage medium
CN103955548B (en) A kind of webpage rendering intent and device
CN105205393A (en) Method and equipment for processing hijacked browser
CN104793957A (en) Method and device for detecting website existing in server and device
CN105357265A (en) Method for identifying state of being hijacked of browser

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant
TR01 Transfer of patent right
TR01 Transfer of patent right

Effective date of registration: 20240105

Address after: 100088 room 112, block D, 28 new street, new street, Xicheng District, Beijing (Desheng Park)

Patentee after: BEIJING QIHOO TECHNOLOGY Co.,Ltd.

Address before: 100088 room 112, block D, 28 new street, new street, Xicheng District, Beijing (Desheng Park)

Patentee before: BEIJING QIHOO TECHNOLOGY Co.,Ltd.

Patentee before: Qizhi software (Beijing) Co.,Ltd.