CN105468993A - Information processing method and device - Google Patents

Information processing method and device Download PDF

Info

Publication number
CN105468993A
CN105468993A CN201510830888.6A CN201510830888A CN105468993A CN 105468993 A CN105468993 A CN 105468993A CN 201510830888 A CN201510830888 A CN 201510830888A CN 105468993 A CN105468993 A CN 105468993A
Authority
CN
China
Prior art keywords
network address
access
user
web page
current accessed
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201510830888.6A
Other languages
Chinese (zh)
Inventor
杨庆
滕乐
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Kingsoft Internet Security Software Co Ltd
Original Assignee
Beijing Kingsoft Internet Security Software Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Kingsoft Internet Security Software Co Ltd filed Critical Beijing Kingsoft Internet Security Software Co Ltd
Priority to CN201510830888.6A priority Critical patent/CN105468993A/en
Publication of CN105468993A publication Critical patent/CN105468993A/en
Pending legal-status Critical Current

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60Protecting data
    • G06F21/62Protecting access to data via a platform, e.g. using keys or access control rules
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2119Authenticating web pages, e.g. with suspicious links

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Software Systems (AREA)
  • General Health & Medical Sciences (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Health & Medical Sciences (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Bioethics (AREA)
  • Information Transfer Between Computers (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Storage Device Security (AREA)

Abstract

The embodiment of the invention discloses an information processing method and device, relates to the technical field of computers, and can improve the security of network access of users. The information processing method comprises the following steps: receiving an IE webpage access instruction of a user; acquiring the current access website of the user according to the IE webpage access instruction; confirming the validity of the current access website; and when the current access website is determined to be illegal, relocating the access webpage of the user to a safe access website. The invention is suitable for the webpage access monitoring technology.

Description

A kind of information processing method and device
Technical field
The present invention relates to field of computer technology, particularly relate to a kind of information processing method and device.
Background technology
In current information society, almost everyone needs to use browser access website every day, obtains the information oneself needed inside various website.Network address is as the entrance of access websites, and security performance is even more important.But in the process of accessed web page, a lot of Malware usually maliciously can distort network address, by the network address that the Browser Hijack of user is specified to Malware, thus exposes the privacy of user, injures the account number safety of user.Therefore, the network access of user is dangerous.
Summary of the invention
In view of this, the embodiment of the present invention provides a kind of information processing method and device, can improve the security of subscriber network access.
For achieving the above object, embodiments of the invention adopt following technical scheme:
On the one hand, the embodiment of the present invention provides a kind of information processing method, comprising:
Receive the IE web page access instruction of user;
The current accessed network address of described user is obtained according to the instruction of described IE web page access;
Confirm the legitimacy of described current accessed network address;
When determining that described current accessed network address is illegal, the accessed web page of described user is repositioned onto secure access network address.
As another embodiment, the described current accessed network address obtaining described user according to the instruction of described IE web page access comprises:
Browser auxiliary object BHO is utilized to obtain described current accessed network address.
As another embodiment, the legitimacy of the described current accessed network address of described confirmation comprises:
Network address in described current accessed network address and default network address blacklist is compared.
As another embodiment, described when determining that described current accessed network address is illegal, the accessed web page of described user is repositioned onto secure access network address, comprises:
When determining that described current accessed network address is consistent with the network address in described default network address blacklist, determining that described current accessed network address is illegal, providing network address to access information to described user;
When receive described user to the confirmation of described network address access information after, the accessed web page of described user is repositioned onto described secure access network address.
As another embodiment, further, described method also comprises:
Browser auxiliary object BHO is utilized to obtain the initial access network address of described user according to the instruction of described IE web page access;
Described when receive described user to the confirmation of described network address access information after, the accessed web page of described user is repositioned onto described secure access network address and comprises:
When receive described user to the confirmation of described network address access information after, the accessed web page of described user is repositioned onto described initial access network address.
Second aspect, the embodiment of the present invention provides a kind of signal conditioning package, comprising:
Receiving element, for receiving the IE web page access instruction of user;
Acquiring unit, for obtaining the current accessed network address of described user according to the instruction of described IE web page access;
Confirmation unit, for confirming the legitimacy of described current accessed network address;
Processing unit, for when determining that described current accessed network address is illegal, is repositioned onto secure access network address by the accessed web page of described user.
As another embodiment, described acquiring unit specifically for:
Browser auxiliary object BHO is utilized to obtain described current accessed network address.
As another embodiment, described confirmation unit specifically for: the network address in described current accessed network address and default network address blacklist is compared.
As another embodiment, described processing unit comprises:
Reminding module, for when determining that described current accessed network address is consistent with the network address in described default network address blacklist, determines that described current accessed network address is illegal, provides network address to access information to described user;
Processing module, for when receive described user to the confirmation of described network address access information after, the accessed web page of described user is repositioned onto described secure access network address.
As another embodiment, further, described acquiring unit also for: utilize browser auxiliary object BHO to obtain the initial access network address of described user according to the instruction of described IE web page access;
Described processing module specifically for: when receive described user to the confirmation of described network address access information after, the accessed web page of described user is repositioned onto described initial access network address.
The third aspect, the embodiment of the present invention provides a kind of electronic equipment, comprising: processor, storer, communication interface and bus;
Described processor, described storer and described communication interface are connected by described bus and complete mutual communication;
Described storer stores executable programs code;
Described processor runs the program corresponding with described executable program code by reading the executable program code stored in described storer, for the information processing method performed described in aforementioned any one.
In embodiments of the present invention, when determining that user is when the current accessed network address utilizing IE browser to access is different with initial access network address, if through confirming to find that current accessed network address is illegal, the access network address so by user is repositioned onto in secure access network address.Thus, utilize the scheme of the embodiment of the present invention to avoid the malice abduction of user being accessed to network address, improve the security of subscriber network access.
Accompanying drawing explanation
In order to be illustrated more clearly in the embodiment of the present invention or technical scheme of the prior art, be briefly described to the accompanying drawing used required in embodiment or description of the prior art below, apparently, accompanying drawing in the following describes is only some embodiments of the present invention, for those of ordinary skill in the art, under the prerequisite not paying creative work, other accompanying drawing can also be obtained according to these accompanying drawings.
Fig. 1 is the process flow diagram of the information processing method of the embodiment of the present invention one;
Fig. 2 is the process flow diagram of the information processing method of the embodiment of the present invention two;
Fig. 3 is the schematic diagram of the signal conditioning package of the embodiment of the present invention three;
Fig. 4 is the schematic diagram of the electronic equipment of the embodiment of the present invention four.
Embodiment
Below in conjunction with accompanying drawing, a kind of application program recommend method of the embodiment of the present invention and device are described in detail.Should be clear and definite, described embodiment is only the present invention's part embodiment, instead of whole embodiments.Based on the embodiment in the present invention, those of ordinary skill in the art, not making other embodiments all obtained under creative work prerequisite, belong to the scope of protection of the invention.
As shown in Figure 1, the information processing method of the embodiment of the present invention one, is performed by web page access supervising device, comprising:
Step 11, web page access supervising device receive the IE web page access instruction of user.
In embodiments of the present invention, when user double-clicks the icon of IE browser, IE browser is run.Now, be equivalent to user and have sent the instruction of IE web page access.User can input the network address of wanting to access in the address field of IE browser in a particular application, and utilizes IE browser to open network address.At this, user is called current accessed network address by the network address that IE browser is being browsed.
Step 12, web page access supervising device obtain the current accessed network address of described user according to the instruction of described IE web page access.
In embodiments of the present invention, web page access supervising device is by IE browser current accessed network address described in BHO (BrowserHelperObject, browser auxiliary object) technical limit spacing.
BHO is the industrywide standard opening interactive interface to third party programmer as browser that Microsoft releases, and just can be entered " interactive interface " (INTERACTIVEDInterface) in browser field by simple code.By this interface, the behavior of Code obtaining browser can be write, such as " retrogressing ", " advance ", " the current accessed page " etc.Utilize the interaction characteristic of BHO, can also control browser behavior with code, browser toolbar is replaced in such as amendment, adds the program pushbutton etc. of oneself.Therefore, in embodiments of the present invention, when user accesses IE browser, by the current accessed network address of BHO technical limit spacing user.
Step 13, web page access supervising device confirm the legitimacy of described current accessed network address.
A default network address blacklist can be pre-set in a particular application, in blacklist, store the information of illegal network address that is that web page access supervising device is thought or user's setting.Can determine that whether current accessed network address is legal by the network address in current accessed network address and this blacklist being compared.
Concrete, in embodiments of the present invention, the network address in the current accessed network address obtained in step 13 and default network address blacklist compares by web page access supervising device.If when current accessed network address is consistent with the network address in default network address blacklist, can think that current accessed network address is illegal, otherwise think that current accessed network address is legal.
The accessed web page of described user, when determining that described current accessed network address is illegal, is repositioned onto secure access network address by step 14, web page access supervising device.
When determining that described current accessed network address is consistent with the network address in described default network address blacklist, determining that described current accessed network address is illegal, now, providing network address to access information to described user.When receive described user to the confirmation of described network address access information after, the accessed web page of described user is repositioned onto secure access network address.
At this, described secure access network address can be the network address through confirming as the information security that can ensure user pre-set by web page access supervising device, can also be that the user arranged by user thinks safe access network address.
Such as, if the secure access network address that the user of above-mentioned acquisition is arranged is network address A, when determining that current accessed network address is illegal, can point out to user " whether accessing network address A ", if user have selected confirmation, then the accessed web page of described user is repositioned onto network address A.
In embodiments of the present invention, by various ways, the accessed web page of user is repositioned onto network address A.Such as, utilize DNS (DomainNameSystem, domain name system) redirecting technique, by current for user network address of accessing also namely current accessed network address change to secure access network address, thus reset the accessed web page of described user be repositioned onto described secure access network address.
As seen from the above, in embodiments of the present invention, when determining that user is when the current accessed network address utilizing IE browser to access is different with initial access network address, if through confirming to find that current accessed network address is illegal, the access network address so by user is repositioned onto in secure access network address.Thus, utilize the scheme of the embodiment of the present invention to avoid the malice abduction of user being accessed to network address, improve the security of subscriber network access.
As shown in Figure 2, the information processing method of the embodiment of the present invention two, comprising:
The IE web page access instruction of step 21, reception user.
Step 22, obtain initial access network address and the current accessed network address of described user according to the instruction of described IE web page access.
The network address inputted at the address field of IE browser when user opens IE browser is called initial access network address, that is to say that user wants the network address of accessing at first.Suppose, be network address A by the initial access network address of the user of BHO technical limit spacing in this step, current accessed network address is network address B.
Step 23, confirm the legitimacy of described current accessed network address.
Concrete, determine network address B whether in default network address blacklist.
Step 24, when determining that described current accessed network address is illegal, the accessed web page of described user is repositioned onto described initial access network address.
Step 25, when determining that current accessed network address is legal, thinking that the access network address of user is not maliciously kidnapped, still the accessed web page of user being rested on the webpage of current accessed.
At this, suppose that network address B is illegal, so the accessed web page of described user is repositioned onto described initial access network address, i.e. network address A.
As seen from the above, in embodiments of the present invention, when determining that user is when the current accessed network address utilizing IE browser to access is different with initial access network address, if through confirming to find that current accessed network address is illegal, the access network address so by user is repositioned onto in secure access network address.Thus, utilize the scheme of the embodiment of the present invention to avoid the malice abduction of user being accessed to network address, improve the security of subscriber network access.
As shown in Figure 3, the signal conditioning package of the embodiment of the present invention three, comprising:
Receiving element 31, for receiving the IE web page access instruction of user; Acquiring unit 32, for obtaining the current accessed network address of described user according to the instruction of described IE web page access; Confirmation unit 33, for confirming the legitimacy of described current accessed network address; Processing unit 34, for when determining that described current accessed network address is illegal, is repositioned onto secure access network address by the accessed web page of described user.
Wherein, described acquiring unit 32 specifically for: utilize browser auxiliary object BHO to obtain described current accessed network address.
Wherein, described confirmation unit 33 specifically for: the network address in described current accessed network address and default network address blacklist is compared.
Described processing unit 34 can comprise: reminding module, for when determining that described current accessed network address is consistent with the network address in described default network address blacklist, determines that described current accessed network address is illegal, provides network address to access information to described user; Processing module, for when receive described user to the confirmation of described network address access information after, the accessed web page of described user is repositioned onto described secure access network address.
In addition, in order to improve the experience of user further, described acquiring unit also for: utilize browser auxiliary object BHO to obtain the initial access network address of described user according to the instruction of described IE web page access.Described processing module specifically for: when receive described user to the confirmation of described network address access information after, the accessed web page of described user is repositioned onto described initial access network address.
Described in the embodiment of the present invention, the principle of work of device can refer to the description of preceding method embodiment.
As seen from the above, in embodiments of the present invention, when determining that user is when the current accessed network address utilizing IE browser to access is different with initial access network address, if through confirming to find that current accessed network address is illegal, the access network address so by user is repositioned onto in secure access network address.Thus, utilize the scheme of the embodiment of the present invention to avoid the malice abduction of user being accessed to network address, improve the security of subscriber network access.
As shown in Figure 4, the embodiment of the present invention four additionally provides a kind of electronic equipment, comprising: processor 41, storer 42, communication interface 43 and bus 44.Described processor 41, described storer 42 and described communication interface 43 are connected by described bus and complete mutual communication; Described storer 42 stores executable programs code; Described processor runs the program corresponding with described executable program code by reading the executable program code stored in described storer, for the information processing method performed described in aforementioned any embodiment.
This electronic equipment exists in a variety of forms, includes but not limited to:
(1) mobile communication equipment: the feature of this kind equipment possesses mobile communication function, and to provide speech, data communication for main target.This Terminal Type comprises: smart mobile phone (such as iPhone), multimedia handset, functional mobile phone, and low-end mobile phone etc.
(2) super mobile personal computer equipment: this kind equipment belongs to the category of personal computer, has calculating and processing capacity, generally also possesses mobile Internet access characteristic.This Terminal Type comprises: PDA, MID and UMPC equipment etc., such as iPad.
(3) portable entertainment device: this kind equipment can show and play multimedia content.This kind equipment comprises: audio frequency, video player (such as iPod), handheld device, e-book, and intelligent toy and portable car-mounted navigator.
(4) server: the equipment that calculation services is provided, the formation of server comprises processor, hard disk, internal memory, system bus etc., server and general computer architecture similar, but owing to needing to provide highly reliable service, therefore require higher in processing power, stability, reliability, security, extensibility, manageability etc.
(4) other have the electronic installation of data interaction function.
As seen from the above, in embodiments of the present invention, when determining that user is when the current accessed network address utilizing IE browser to access is different with initial access network address, if through confirming to find that current accessed network address is illegal, the access network address so by user is repositioned onto in secure access network address.Thus, utilize the scheme of the embodiment of the present invention to avoid the malice abduction of user being accessed to network address, improve the security of subscriber network access.
One of ordinary skill in the art will appreciate that all or part of flow process realized in above-described embodiment method, that the hardware that can carry out instruction relevant by computer program has come, described program can be stored in a computer read/write memory medium, this program, when performing, can comprise the flow process of the embodiment as above-mentioned each side method.Wherein, described storage medium can be magnetic disc, CD, read-only store-memory body (Read-OnlyMemory, ROM) or random store-memory body (RandomAccessMemory, RAM) etc.
The above; be only the specific embodiment of the present invention, but protection scope of the present invention is not limited thereto, is anyly familiar with those skilled in the art in the technical scope that the present invention discloses; the change that can expect easily or replacement, all should be encompassed within protection scope of the present invention.Therefore, protection scope of the present invention should be as the criterion with the protection domain of claim.

Claims (10)

1. an information processing method, is characterized in that, comprising:
Receive the IE web page access instruction of user;
The current accessed network address of described user is obtained according to the instruction of described IE web page access;
Confirm the legitimacy of described current accessed network address;
When determining that described current accessed network address is illegal, the accessed web page of described user is repositioned onto secure access network address.
2. method according to claim 1, is characterized in that, the described current accessed network address obtaining described user according to the instruction of described IE web page access comprises:
Browser auxiliary object BHO is utilized to obtain described current accessed network address.
3. method according to claim 1, is characterized in that, the legitimacy of the described current accessed network address of described confirmation comprises:
Network address in described current accessed network address and default network address blacklist is compared.
4., according to the arbitrary described method of claim 1-3, it is characterized in that, described when determining that described current accessed network address is illegal, the accessed web page of described user is repositioned onto secure access network address, comprises:
When determining that described current accessed network address is consistent with the network address in described default network address blacklist, determining that described current accessed network address is illegal, providing network address to access information to described user;
When receive described user to the confirmation of described network address access information after, the accessed web page of described user is repositioned onto described secure access network address.
5. method according to claim 4, is characterized in that, described method also comprises:
Browser auxiliary object BHO is utilized to obtain the initial access network address of described user according to the instruction of described IE web page access;
Described when receive described user to the confirmation of described network address access information after, the accessed web page of described user is repositioned onto described secure access network address and comprises:
When receive described user to the confirmation of described network address access information after, the accessed web page of described user is repositioned onto described initial access network address.
6. a signal conditioning package, is characterized in that, comprising:
Receiving element, for receiving the IE web page access instruction of user;
Acquiring unit, for obtaining the current accessed network address of described user according to the instruction of described IE web page access;
Confirmation unit, for confirming the legitimacy of described current accessed network address;
Processing unit, for when determining that described current accessed network address is illegal, is repositioned onto secure access network address by the accessed web page of described user.
7. device according to claim 6, is characterized in that, described acquiring unit specifically for:
Browser auxiliary object BHO is utilized to obtain described current accessed network address.
8. device according to claim 6, is characterized in that, described confirmation unit specifically for: the network address in described current accessed network address and default network address blacklist is compared.
9., according to the arbitrary described device of claim 6-8, it is characterized in that, described processing unit comprises:
Reminding module, for when determining that described current accessed network address is consistent with the network address in described default network address blacklist, determines that described current accessed network address is illegal, provides network address to access information to described user;
Processing module, for when receive described user to the confirmation of described network address access information after, the accessed web page of described user is repositioned onto described secure access network address.
10. device according to claim 9, is characterized in that, described acquiring unit also for: utilize browser auxiliary object BHO to obtain the initial access network address of described user according to the instruction of described IE web page access;
Described processing module specifically for: when receive described user to the confirmation of described network address access information after, the accessed web page of described user is repositioned onto described initial access network address.
CN201510830888.6A 2015-11-25 2015-11-25 Information processing method and device Pending CN105468993A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201510830888.6A CN105468993A (en) 2015-11-25 2015-11-25 Information processing method and device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201510830888.6A CN105468993A (en) 2015-11-25 2015-11-25 Information processing method and device

Publications (1)

Publication Number Publication Date
CN105468993A true CN105468993A (en) 2016-04-06

Family

ID=55606675

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201510830888.6A Pending CN105468993A (en) 2015-11-25 2015-11-25 Information processing method and device

Country Status (1)

Country Link
CN (1) CN105468993A (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108874462A (en) * 2017-12-28 2018-11-23 北京安天网络安全技术有限公司 A kind of browser behavior acquisition methods, device, storage medium and electronic equipment

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080215603A1 (en) * 2006-09-28 2008-09-04 Microsoft Corporation Serialization of run-time state
CN103116723A (en) * 2013-02-06 2013-05-22 北京奇虎科技有限公司 Method, device and system of web site interception process
CN103546470A (en) * 2013-10-24 2014-01-29 腾讯科技(武汉)有限公司 Safe access method, system and device
CN103870554A (en) * 2009-12-11 2014-06-18 北京奇虎科技有限公司 Method for realizing browser address bar nameplate

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080215603A1 (en) * 2006-09-28 2008-09-04 Microsoft Corporation Serialization of run-time state
CN103870554A (en) * 2009-12-11 2014-06-18 北京奇虎科技有限公司 Method for realizing browser address bar nameplate
CN103116723A (en) * 2013-02-06 2013-05-22 北京奇虎科技有限公司 Method, device and system of web site interception process
CN103546470A (en) * 2013-10-24 2014-01-29 腾讯科技(武汉)有限公司 Safe access method, system and device

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108874462A (en) * 2017-12-28 2018-11-23 北京安天网络安全技术有限公司 A kind of browser behavior acquisition methods, device, storage medium and electronic equipment
CN108874462B (en) * 2017-12-28 2021-09-21 北京安天网络安全技术有限公司 Browser behavior acquisition method and device, storage medium and electronic equipment

Similar Documents

Publication Publication Date Title
US9825943B2 (en) Location determination for user authentication
US11968217B2 (en) Domain name and URL visual verification for increased security
CN103425736B (en) A kind of web information recognition, Apparatus and system
US20170187737A1 (en) Method and electronic device for processing user behavior data
CN106973384B (en) A kind of Wireless Fidelity Wi-Fi connection method and mobile terminal
US20160294812A1 (en) Account login method and device
CN102487322B (en) Realize the register method of dynamic password authentication, device and system
CN105635122A (en) Wifi access method and device and electronic equipment
CN104754563A (en) Wireless hotspot access sharing method, mobile terminals and system
CN105323210A (en) Method, apparatus and cloud server for detecting website security
CN105574948A (en) Checking-in method and equipment
US20180357404A1 (en) Information processing method and apparatus, and electronic device
CN104980420A (en) Business processing method, device, terminal and server
CN104065674A (en) Terminal device and information processing method
CN105354459A (en) Information processing method and device and electronic equipment
CN103067465B (en) Sharing files method and system
CN105320777A (en) Application program recommendation method and device
CN104573486A (en) Vulnerability detection method and device
CN105491153A (en) Sharing method and device and mobile terminal
CN104991935A (en) Website attention processing method and apparatus
CN106454884B (en) For distinguishing the method and apparatus of wireless access point of the same name
CN105468993A (en) Information processing method and device
CN109450853B (en) Malicious website determination method and device, terminal and server
CN108134803B (en) URL attack protection method and device
CN105787302A (en) Application processing method and device and electronic equipment

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20160406