CN105653944A - Detection method and device of cheating behaviors - Google Patents
Detection method and device of cheating behaviors Download PDFInfo
- Publication number
- CN105653944A CN105653944A CN201510998130.3A CN201510998130A CN105653944A CN 105653944 A CN105653944 A CN 105653944A CN 201510998130 A CN201510998130 A CN 201510998130A CN 105653944 A CN105653944 A CN 105653944A
- Authority
- CN
- China
- Prior art keywords
- data
- page
- detected
- terminal
- cheating
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/55—Detecting local intrusion or implementing counter-measures
- G06F21/554—Detecting local intrusion or implementing counter-measures involving event detection and direct action
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Software Systems (AREA)
- Theoretical Computer Science (AREA)
- Computer Hardware Design (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Storage Device Security (AREA)
Abstract
The invention discloses a detection method and device of cheating behaviors. The detection method of the cheating behaviors comprises the following steps: responding to a page displaying request triggered by a terminal to be detected, and sending a page used for submitting data to the terminal to be detected; monitoring the data writing event of the page to obtain a monitoring result of data writing; and according to the monitoring result, judging whether the terminal to be detected has the cheating behaviors or not. The technical scheme of the invention accurately realizes the detection of the cheating behaviors generated when a third party automatically writes data through a computer, effectively protects general users from unfair treatment, and improves user experience.
Description
Technical field
The present invention relates to network technology field, in particular to a kind of cheating detection method and device.
Background technology
The application of Internet technology is more and more deep, more popularization activity and interactive link all can introduce prize award (such as: micro-letter group robs red packet, kills or send telephone expenses activity etc. for two 11 seconds) of cash, material object, virtual class, and some oxes, hacker utilize the leak of various rule, system, automatically the cheating mode of data is write by computer, snatch away these prizes, cause the inequities of normal users.
Traditional strick precaution mechanism only for login user, limit IP or adds checking code etc. in service end, but these take precautions against mechanism is all can deal with by Computer Automatic Recognition and the mode distorting information, service end also cannot accurately judge that the data that computer is submitted to are write by computer by user, or automatically write by computer, it is difficult to avoid general user that unfair treatment occurs, seriously have impact on Consumer's Experience.
Summary of the invention
In view of the above problems, propose the present invention to provide a kind of the cheating detection method and the device that overcome the problems referred to above or solve or slow down the problems referred to above at least in part, accurately realize the detection that third party is write automatically by computer the cheating of data, promote Consumer's Experience.
According to an aspect of the present invention, it provides a kind of cheating detection method, the method comprises:
In response to the page presentation request that terminal to be detected triggers, send the page for submitting data to described terminal to be detected;
Monitor the data writing events of the described page, to obtain the snoop results of data write;
Judge whether described terminal to be detected exists cheating according to described snoop results.
Can selection of land, the data writing events of the described page of described monitoring, with obtain data write snoop results, comprise further:
Monitor the data writing events of the described page, determine that described terminal to be detected writes the writing speed of data to the described page according to the data of write in the described page and write time, and using said write speed as described snoop results.
Can selection of land, described judge whether described terminal to be detected exists cheating according to described snoop results, comprise further:
Judge whether said write speed is greater than pre-set velocity, when said write speed is greater than described pre-set velocity, assert that described terminal to be detected exists cheating.
Can selection of land, the data writing events of the described page of described monitoring, with obtain data write snoop results, comprise further:
Monitor the data writing events in the described page, obtain the focus window when described terminal to be detected writes data to the described page;
Correspondingly, described judge whether described terminal to be detected exists cheating according to described snoop results, comprise further:
Judge whether described focus window is the described page, when described focus window is not the described page, assert that described terminal to be detected exists cheating.
Can selection of land, the data writing events of the described page of described monitoring, with obtain data write snoop results, comprise further:
Monitor the data writing events in the described page, obtain the focus window when described terminal to be detected writes data to the described page, and obtain keyboard state when described terminal to be detected writes data to the described page and cursor state;
Correspondingly, described judge whether described terminal to be detected exists cheating according to described snoop results, comprise further:
When described focus window is the described page, judge whether described keyboard state or cursor state meet pre-conditioned, if described keyboard state or cursor state all do not meet pre-conditioned, assert that described terminal to be detected exists cheating.
Can selection of land, described keyboard state is the event recorder of keyboard shift key, and described cursor state is the position of cursor;
Correspondingly, described pre-conditioned comprise:
The event recorder of described keyboard shift key has the event of being triggered, and the position of described cursor is positioned at the position writing data on the described page.
Can selection of land, described judge whether described terminal to be detected exists cheating according to described snoop results after, described method also comprises:
Submitted to the request of data in response to described terminal to be detected by the described page, according to cheating detected result, the data that described terminal to be detected is submitted to by the described page are processed.
Can selection of land, described according to cheating detected result the data that described terminal to be detected is submitted to by the described page are processed, comprise further:
Described cheating detected result be terminal to be detected there is cheating time, the data submitted to by the described page are tackled so that it is corresponding point of destination cannot be arrived.
According to another aspect of the present invention, it provides a kind of cheating detection device, this device comprises:
Send unit, be suitable in response to the page presentation request that terminal to be detected triggers, send the page for submitting data to described terminal to be detected;
Monitoring unit, is suitable for monitoring the data writing events that described transmission unit sends the page, to obtain the snoop results of data write;
Judging unit, is suitable for the snoop results according to described monitoring unit and judges whether described terminal to be detected exists cheating.
Can selection of land, described monitoring unit, it is further adapted for the data writing events monitoring the described page, determines that described terminal to be detected writes the writing speed of data to the described page according to the data of write in the described page and write time, and using said write speed as described snoop results.
Can selection of land, described judging unit, is further adapted for and judges whether said write speed is greater than pre-set velocity, when said write speed is greater than described pre-set velocity, assert that described terminal to be detected exists cheating.
Can selection of land, described monitoring unit, is further adapted for the data writing events monitored in the described page, obtains the focus window when described terminal to be detected writes data to the described page;
Correspondingly, described judging unit, is further adapted for and judges whether described focus window is the described page, when described focus window is not the described page, assert that described terminal to be detected exists cheating.
Can selection of land, described monitoring unit, it is further adapted for the data writing events monitored in the described page, obtains the focus window when described terminal to be detected writes data to the described page, and obtain keyboard state when described terminal to be detected writes data to the described page and cursor state;
Correspondingly, described judging unit, is further adapted for when described focus window is the described page, judges whether described keyboard state or cursor state meet pre-conditioned, if described keyboard state or cursor state all do not meet pre-conditioned, assert that described terminal to be detected exists cheating.
Can selection of land, described keyboard state is the event recorder of keyboard shift key, and described cursor state is the position of cursor;
Correspondingly, described pre-conditioned comprise:
The event recorder of described keyboard shift key has the event of being triggered, and the position of described cursor is positioned at the position writing data on the described page.
Can selection of land, described device also comprises:
Processing unit, be suitable for described judge whether described terminal to be detected exists cheating according to described snoop results after, submitted to the request of data in response to described terminal to be detected by the described page, according to cheating detected result, the data that described terminal to be detected is submitted to by the described page are processed.
Can selection of land, described processing unit, be further adapted for described cheating detected result be terminal to be detected there is cheating time, the data submitted to by the described page are tackled so that it is corresponding point of destination cannot be arrived.
The useful effect of the present invention is:
The cheating detection method that the present invention proposes and device, in response to the page presentation request that terminal to be detected triggers, the page for submitting data to is sent to described terminal to be detected, by monitoring the data writing events of the described page, to obtain the snoop results of data write, and judge whether described terminal to be detected exists cheating according to described snoop results. Accurately realize the detection that third party is write automatically by computer the cheating of data, effectively prevent general user and be subject to unfair treatment, it is to increase Consumer's Experience.
Above-mentioned explanation is only the general introduction of technical solution of the present invention, in order to the technique means of the present invention can be better understood, and can be implemented according to the content of specification sheets, and in order to above and other objects of the present invention, feature and advantage can be become apparent, below especially exemplified by the specific embodiment of the present invention.
Accompanying drawing explanation
By reading hereafter detailed description of the preferred embodiment, various other advantage and benefit will become clear for those of ordinary skill in the art and understand. Accompanying drawing is only for illustrating the object of preferred implementation, and does not think limitation of the present invention. And in whole accompanying drawing, represent identical parts with identical reference symbol. In the accompanying drawings:
Fig. 1 diagrammatically illustrates the schematic flow sheet of the cheating detection method of one embodiment of the invention;
Fig. 2 diagrammatically illustrates the schematic flow sheet of the cheating detection method of another embodiment of the present invention;
Fig. 3 diagrammatically illustrates the schematic flow sheet of the cheating detection method of another embodiment of the present invention;
Fig. 4 diagrammatically illustrates the schematic flow sheet of the cheating detection method of another embodiment of the present invention;
Fig. 5 diagrammatically illustrates the schematic flow sheet of the cheating detection method of another embodiment of the present invention;
Fig. 6 diagrammatically illustrates the structural representation of the cheating detection device of one embodiment of the invention;
Fig. 7 diagrammatically illustrates the structural representation of the cheating detection device of another embodiment of the present invention.
Embodiment
Below in conjunction with drawings and Examples, the specific embodiment of the present invention is described in further detail. Following examples are for illustration of the present invention, but are not used for limiting the scope of the invention.
Being described below in detail embodiments of the invention, the example of described embodiment is shown in the drawings, and wherein same or similar label represents same or similar element or has element that is identical or similar functions from start to finish. It is exemplary below by the embodiment being described with reference to the drawings, only for explaining the present invention, and limitation of the present invention can not be interpreted as.
It can be appreciated that unless expressly stated, odd number form " " used herein, " one ", " described " and " being somebody's turn to do " also can comprise plural form to those skilled in the art of the present technique. Should be further understood that, the wording " comprising " used in the specification sheets of the present invention refers to there is described feature, integer, step, operation, element and/or assembly, but does not get rid of and exist or add other features one or more, integer, step, operation, element, assembly and/or their group.
It can be appreciated that unless otherwise defined, all terms used herein (comprise technical term and scientific terminology) to those skilled in the art of the present technique, have the meaning identical with the general understanding of the those of ordinary skill in art of the present invention. It should be further understood that those terms of definition in such as general dictionary, it should it is understood to that there is the meaning consistent with the meaning in the context of prior art, and unless by specific definitions, otherwise can not explain by idealized or too formal implication.
Fig. 1 diagrammatically illustrates the schematic flow sheet of the cheating detection method of one embodiment of the invention;
With reference to Fig. 1, the cheating detection method of the embodiment of the present invention specifically comprises the following steps:
S11, the page presentation request triggered in response to terminal to be detected, send the page for submitting data to described terminal to be detected.
It should be noted that, the executive agent of the method for present embodiment is service end. Terminal to be detected in the present embodiment is the equipment such as computer, mobile phone, panel computer, palm PC PDA or notebook, certainly, also can be the equipment that other have similar function, and this is not limited by the present invention.
Will be understood that, the page presentation request that described terminal to be detected triggers can be regarded as the page presentation request for submitting data to that terminal to be detected triggers, accordingly, for submitting to the page of data to can be regarded as the relevant user data for receiving user's input, and it is uploaded to the page of service end. In a concrete example, the relevant user data of described user input comprises such as data such as user's account, user's passwords.
In specific implementation, described page presentation request triggers by multiple mode, such as: clicked by mouse and be showed in the movable entry element promoted in interface, or, showing that having activity to promote clicks described entry element on the touch-screen at interface.
Wherein, described entry element is realized by graphic element, text element and button element etc. or its arbitrary combination, and to this, the embodiment of the present invention does not do concrete restriction.
It should be noted that, the triggering mode of page presentation request above-mentioned is only citing, can also comprise other situation in addition to the above, e.g., and the entry element being showed in movable popularization interface by double mouse click or gesture triggering etc. The present invention does not need the triggering to specifically what kind of pattern realizing page presentation request according to limit, and those skilled in the art can be arranged according to practical application.
S12, the data writing events monitoring the described page, to obtain the snoop results of data write.
In specific implementation, service end, by monitoring the data writing events for the page submitting data to, writes snoop results corresponding to process to obtain current page data.
In a concrete example, data writing events includes but not limited to, the dynamic state of the current page or enter the attaching operation etc. of user in data procedures in the mode of the data content of write and the write time of correspondence, write data and write data procedures.
S13, judge whether described terminal to be detected exists cheating according to described snoop results.
It should be noted that, cheating row in the present embodiment specifically refers to, various popularization activity in the Internet, applications store is with in interactive link, the prize award of cash, material object, virtual class is introduced in capital, such as: micro-letter group robs red packet, within two 11 seconds, kills or send telephone expenses activity etc., and this is utilized the leak of various rule, system by some third parties such as ox, hacker, automatically write the cheating mode of data by computer, snatch away the behavior of these prizes.
The cheating detection method that the embodiment of the present invention provides, by monitor terminal side to the data writing events of the page for submitting data to, to obtain the snoop results of data write, and judge whether described terminal to be detected exists cheating according to described snoop results, and then accurately realize the detection that third party is write automatically the cheating of data by computer, and then ensure that normal users can obtain fair treatment, promote Consumer's Experience.
Fig. 2 diagrammatically illustrates the schematic flow sheet of the cheating detection method of another embodiment of the present invention;
With reference to Fig. 2, the cheating detection method of the embodiment of the present invention specifically comprises the following steps:
S21, the page presentation request triggered in response to terminal to be detected, send the page for submitting data to described terminal to be detected.
The step S11 of the enforcement mode shown in step S21 and Fig. 1 is identical, does not repeat them here.
According to the data of write in the described page and write time, S22, the data writing events monitoring the described page, determine that described terminal to be detected writes the writing speed of data to the described page, and using said write speed as described snoop results.
In specific implementation, by monitoring the data writing events for the page submitting data to, obtain the data of write and the write time of correspondence in the described page, calculate, according to preset model, the writing speed that terminal to be detected writes data to the described page further according to the data volume of content of data of write and the write time length of correspondence, and using the writing speed that obtains as described snoop results.
It should be noted that, described preset model is by training data and the study of preset data is obtained.
S23, judge whether said write speed is greater than pre-set velocity, when said write speed is greater than described pre-set velocity, assert that described terminal to be detected exists cheating.
It will be appreciated that the concrete value of described pre-set velocity, those skilled in the art can be arranged according to the test training of the real data input speed to general user, and this embodiment of the present invention is not done concrete restriction.
In present embodiment, by the data writing events of the page is monitored, and the data and write time according to write in the described page determine that terminal to be detected writes the writing speed of data to the described page, and writing speed and pre-set velocity are compared, realize the identification of cheating treating sense terminals, thus prevent third party from automatically writing the cheating of data by computer, it is to increase security, ensure that normal users can obtain fair treatment, promote Consumer's Experience.
Due to by the mode that writing speed and pre-set velocity compare being realized the scheme treating the identification of the cheating of sense terminals, for the third party such as ox, hacker, it still arranges the adjustment carrying out writing data by computer, causes service end cannot carry out accurately detecting to its cheating. For this reason, present invention also offers the embodiment of another cheating detection method.
Fig. 3 diagrammatically illustrates the schematic flow sheet of the cheating detection method of another embodiment of the present invention;
With reference to Fig. 3, the cheating detection method of the embodiment of the present invention specifically comprises the following steps:
S31, the page presentation request triggered in response to terminal to be detected, send the page for submitting data to described terminal to be detected.
The step S11 of the enforcement mode shown in step S21 and Fig. 1 is identical, does not repeat them here.
S32, the data writing events monitored in the described page, obtain the focus window when described terminal to be detected writes data to the described page.
It will be appreciated that as user in described terminal to be detected to fashionable for submitting to the page of data to carry out data write, necessarily this is used for submitting to the page of data to corresponding focus window. Therefore, described for the data writing events in the page submitting data to by monitoring, obtain the focus window when described terminal to be detected writes data to the described page and realize the identification treating the cheating of sense terminals.
S33, whether be the described page, when described focus window is not the described page, assert that described terminal to be detected exists cheating if judging described focus window.
In a concrete example, currently there is multiple window opened in terminal to be detected, such as music window, documentation window, chat window and the window etc. for submitting to the page of data corresponding, monitor the data writing events in the described page, if when described terminal to be detected writes data to the described page, corresponding focus window be not described for submitting the page of data to time, but chat window, then assert that described terminal to be detected exists cheating.
In present embodiment, by the data writing events of the page is monitored, focus window corresponding during to obtain the data write in the described page, further by judging whether this focus window is described for submitting the page of data to, realize the identification treating the cheating of sense terminals, realize the detection that third party is write automatically by computer the cheating of data accurately, thus effectively prevent third party from automatically writing the cheating of data by computer, improve security, ensure that normal users can obtain fair treatment, promote Consumer's Experience.
Fig. 4 diagrammatically illustrates the schematic flow sheet of the cheating detection method of another embodiment of the present invention;
With reference to Fig. 4, the cheating detection method of the embodiment of the present invention specifically comprises the following steps:
S41, the page presentation request triggered in response to terminal to be detected, send the page for submitting data to described terminal to be detected.
The step S11 of the enforcement mode shown in step S21 and Fig. 1 is identical, does not repeat them here.
S42, the data writing events monitored in the described page, obtain the focus window when described terminal to be detected writes data to the described page, and obtains keyboard state when described terminal to be detected writes data to the described page and cursor state.
In the present embodiment, described keyboard state is the event recorder of keyboard shift key, and described cursor state is the position of cursor.
S43, when described focus window is the described page, judge whether described keyboard state or cursor state meet pre-conditioned, if described keyboard state or cursor state all do not meet pre-conditioned, assert that described terminal to be detected exists cheating.
In the present embodiment, described pre-conditioned comprise: the event recorder of described keyboard shift key has the event of being triggered, and the position of described cursor is positioned at the position writing data on the described page.
In present embodiment, by judging terminal to be detected is whether the focus window of the fashionable correspondence of data write is described for submitting the basis of the page of data to, further by the data writing events in the described page of monitoring, to obtain keyboard state when described terminal to be detected writes data to the described page and cursor state, the identification realizing treating the cheating of sense terminals is combined by both, when can realize further to the described page, although described terminal to be detected is write data, corresponding focus window is described for submitting the page of data to, but the state that terminal does not carry out data write operation identifies, thus realize the detection that third party is write automatically by computer the cheating of data more accurately, effectively prevent third party from automatically writing the cheating of data by computer, improve security, ensure that normal users can obtain fair treatment, promote Consumer's Experience.
Fig. 5 diagrammatically illustrates the schematic flow sheet of the cheating detection method of one embodiment of the invention;
With reference to Fig. 5, the cheating detection method of the embodiment of the present invention specifically comprises the following steps:
S51, the page presentation request triggered in response to terminal to be detected, send the page for submitting data to described terminal to be detected.
S52, the data writing events monitoring the described page, to obtain the snoop results of data write.
S53, judge whether described terminal to be detected exists cheating according to described snoop results.
Step S11��the S13 of the enforcement mode shown in step S51��S53 and Fig. 1 is identical, does not repeat them here.
S54, in response to described terminal to be detected by the described page submit to data request, according to cheating detected result the data that described terminal to be detected is submitted to by the described page are processed.
In a particular application, described according to cheating detected result the data that described terminal to be detected is submitted to by the described page are processed, comprise further: described cheating detected result be terminal to be detected there is cheating time, the data submitted to by the described page are tackled so that it is corresponding point of destination cannot be arrived.
Will be understood that, the data submitted to by the described page are tackled, making it cannot arrive corresponding point of destination is that the page that cheating is corresponding is submitted to a kind of processing policy in data, certainly, for the page that cheating is corresponding submits to data also by other processing policies, as, submit to data to add Black List database by for the page that cheating is corresponding, this is not limited by present embodiment.
In present embodiment, by being submitted to the request of data by the described page in response to described terminal to be detected, according to cheating detected result, the data that described terminal to be detected is submitted to by the described page are processed, current popularization activity and interactive link can not be caused actual influence to ensure the cheating of some third parties such as ox, hacker, and then ensure that normal users can obtain fair treatment, promote Consumer's Experience.
Further, after according to cheating detected result described terminal to be detected being processed by the data that the described page is submitted to, described method also comprises the step sending data interception information to described terminal to be detected, so that user understands the current movable concrete reason applying for unsuccessfully correspondence, avoid user the various popularization activity in the Internet, applications store and interactive link to be lost confidence, have impact on Consumer's Experience.
For embodiment of the method, in order to simple description, therefore it is all expressed as a series of combination of actions, but those skilled in the art should know, the embodiment of the present invention is not by the restriction of described sequence of operation, because according to the embodiment of the present invention, some step can adopt other orders or carry out simultaneously. Secondly, those skilled in the art also should know, the embodiment described in specification sheets all belongs to preferred embodiment, and involved action might not be that the embodiment of the present invention is necessary.
Fig. 6 diagrammatically illustrates the structural representation of the cheating detection device of one embodiment of the invention.
With reference to Fig. 6, the cheating detection device of the embodiment of the present invention specifically comprises transmission unit 601, monitoring unit 602 and judging unit 603, wherein:
Described transmission unit 601, is suitable in response to the page presentation request that terminal to be detected triggers, and sends the page for submitting data to described terminal to be detected;
Described monitoring unit 602, is suitable for monitoring the data writing events that described transmission unit 601 sends the page, to obtain the snoop results of data write;
Described judging unit 603, is suitable for the snoop results according to described monitoring unit 602 and judges whether described terminal to be detected exists cheating.
The cheating detection device that the embodiment of the present invention provides, by monitor terminal side to the data writing events of the page for submitting data to, to obtain the snoop results of data write, and judge whether described terminal to be detected exists cheating according to described snoop results, and then accurately realize the detection that third party is write automatically the cheating of data by computer, and then ensure that normal users can obtain fair treatment, promote Consumer's Experience.
In a kind of optional embodiment of the present invention, described monitoring unit, it is further adapted for the data writing events monitoring the described page, data and write time according to write in the described page determine that described terminal to be detected writes the writing speed of data to the described page, and using said write speed as described snoop results.
In a kind of optional embodiment of the present invention, described judging unit, is further adapted for and judges whether said write speed is greater than pre-set velocity, when said write speed is greater than described pre-set velocity, assert that described terminal to be detected exists cheating.
In a kind of optional embodiment of the present invention, described monitoring unit, is further adapted for the data writing events monitored in the described page, obtains the focus window when described terminal to be detected writes data to the described page;
Correspondingly, described judging unit, is further adapted for and judges whether described focus window is the described page, when described focus window is not the described page, assert that described terminal to be detected exists cheating.
In a kind of optional embodiment of the present invention, described monitoring unit, it is further adapted for the data writing events monitored in the described page, obtain the focus window when described terminal to be detected writes data to the described page, and obtain keyboard state when described terminal to be detected writes data to the described page and cursor state;
Correspondingly, described judging unit, is further adapted for when described focus window is the described page, judges whether described keyboard state or cursor state meet pre-conditioned, if described keyboard state or cursor state all do not meet pre-conditioned, assert that described terminal to be detected exists cheating.
In a kind of optional embodiment of the present invention, described keyboard state is the event recorder of keyboard shift key, and described cursor state is the position of cursor;
Correspondingly, described pre-conditioned comprise:
The event recorder of described keyboard shift key has the event of being triggered, and the position of described cursor is positioned at the position writing data on the described page.
Fig. 7 diagrammatically illustrates the structural representation of the cheating detection device of one embodiment of the invention.
With reference to Fig. 7, the cheating detection device of the embodiment of the present invention specifically comprises transmission unit 701, monitoring unit 702, judging unit 703 and processing unit 704, wherein:
Described transmission unit 701, is suitable in response to the page presentation request that terminal to be detected triggers, and sends the page for submitting data to described terminal to be detected;
Described monitoring unit 702, is suitable for monitoring the data writing events that described transmission unit 701 sends the page, to obtain the snoop results of data write;
Described judging unit 703, is suitable for the snoop results according to described monitoring unit 702 and judges whether described terminal to be detected exists cheating.
Described processing unit 704, be suitable for after according to described snoop results, described judging unit 703 judges whether described terminal to be detected exists cheating, submitted to the request of data in response to described terminal to be detected by the described page, according to cheating detected result, the data that described terminal to be detected is submitted to by the described page are processed.
In a kind of optional embodiment of the present invention, described processing unit 704, be further adapted for described cheating detected result be terminal to be detected there is cheating time, the data submitted to by the described page are tackled so that it is corresponding point of destination cannot be arrived.
For device embodiment, due to itself and embodiment of the method basic simlarity, so what describe is fairly simple, relevant part illustrates see the part of embodiment of the method.
In sum, the cheating detection method that the embodiment of the present invention proposes and device, in response to the page presentation request that terminal to be detected triggers, the page for submitting data to is sent to described terminal to be detected, by monitoring the data writing events of the described page, to obtain the snoop results of data write, and judge whether described terminal to be detected exists cheating according to described snoop results. Effectively realize the detection that third party is write automatically by computer the cheating of data, and then ensure that normal users can obtain fair treatment, promote Consumer's Experience.
It should be noted that it is not intrinsic relevant to any certain computer, virtual system or other equipment with formula at this algorithm provided. Various general-purpose system can also with use based on together with this example. According to description above, it is to construct the structure required by this type systematic is apparent. In addition, the present invention is not also for any certain programmed language. It should be appreciated that various programming language can be utilized to realize the content of the present invention described here, and the description done by language-specific above is the preferred forms in order to disclose the present invention.
In specification sheets mentioned herein, describe a large amount of detail. However, it is understood that embodiments of the invention can be put into practice when not having these details. In some instances, it is not shown specifically known method, structure and technology, so that not fuzzy understanding of this description.
Similarly, it is to be understood that, one or more in order to what simplify the present invention and help to understand in all respects of the present invention, above to, in the description of the exemplary embodiment of the present invention, each feature of the present invention is grouped together in single embodiment, figure or the description to it sometimes. But, the method for the disclosure and device should be construed to the following intention of reflection: namely the present invention for required protection requires feature more more than the feature clearly recorded in each claim. More properly say, as claim book reflect, inventive aspect is all features less than disclosed single embodiment above. Therefore, the claim book following embodiment is thus incorporated to this embodiment clearly, and wherein each claim itself is as the independent embodiment of the present invention.
Those skilled in the art it can be appreciated that the module in the equipment in embodiment can be carried out adaptively change and they are arranged in one or more equipment different from this embodiment. Module in embodiment or unit or assembly can be combined into a module or unit or assembly, and multiple submodule block or subelement or subgroup part can be put them in addition. Except at least some in such feature and/or process or unit mutually repels, it is possible to adopt any combination all processes or the unit of all features disclosed in this specification sheets (comprising adjoint claim, summary and accompanying drawing) and so disclosed any method or equipment to be combined. Unless expressly stated otherwise, each feature disclosed in this specification sheets (comprising adjoint claim, summary and accompanying drawing) can by providing alternative features that is identical, equivalent or similar object to replace.
In addition, the technician of this area can understand, although embodiments more described herein comprise in other embodiment some included feature instead of further feature, but the combination of the feature of different embodiment means to be within the scope of the present invention and forms different embodiments.
Each parts embodiment of the present invention with hardware implementing, or can realize with the software module run on one or more treater, or realizes with their combination. It will be understood by one skilled in the art that the some or all functions that microprocessor or digital signal processor (DSP) can be used in practice to realize the some or all parts in web portal security test set according to embodiments of the present invention. Such as, the present invention can also be embodied as part or all the equipment for performing method as described herein or device program (computer program and computer program). The program of such the present invention of realization can store on a computer-readable medium, or can have the form of one or more signal. Such signal can be downloaded from internet website and obtain, or provides on carrier signal, or provides with any other form.
The above is only the part enforcement mode of the present invention; it is noted that for those skilled in the art, under the premise without departing from the principles of the invention; can also making some improvements and modifications, these improvements and modifications also should be considered as protection scope of the present invention.
Other embodiments of the present invention also disclose following content:
A1, a kind of cheating detection method, comprising:
In response to the page presentation request that terminal to be detected triggers, send the page for submitting data to described terminal to be detected;
Monitor the data writing events of the described page, to obtain the snoop results of data write;
Judge whether described terminal to be detected exists cheating according to described snoop results.
A2, method as described in A1, the data writing events of the described page of described monitoring, to obtain the snoop results of data write, comprises further:
Monitor the data writing events of the described page, determine that described terminal to be detected writes the writing speed of data to the described page according to the data of write in the described page and write time, and using said write speed as described snoop results.
According to described snoop results, A3, method as described in A2, described judge whether described terminal to be detected exists cheating, comprise further:
Judge whether said write speed is greater than pre-set velocity, when said write speed is greater than described pre-set velocity, assert that described terminal to be detected exists cheating.
A4, method as described in A1, the data writing events of the described page of described monitoring, to obtain the snoop results of data write, comprises further:
Monitor the data writing events in the described page, obtain the focus window when described terminal to be detected writes data to the described page;
Correspondingly, described judge whether described terminal to be detected exists cheating according to described snoop results, comprise further:
Judge whether described focus window is the described page, when described focus window is not the described page, assert that described terminal to be detected exists cheating.
A5, method as described in A1, the data writing events of the described page of described monitoring, to obtain the snoop results of data write, comprises further:
Monitor the data writing events in the described page, obtain the focus window when described terminal to be detected writes data to the described page, and obtain keyboard state when described terminal to be detected writes data to the described page and cursor state;
Correspondingly, described judge whether described terminal to be detected exists cheating according to described snoop results, comprise further:
When described focus window is the described page, judge whether described keyboard state or cursor state meet pre-conditioned, if described keyboard state or cursor state all do not meet pre-conditioned, assert that described terminal to be detected exists cheating.
A6, method as described in A5, described keyboard state is the event recorder of keyboard shift key, and described cursor state is the position of cursor;
Correspondingly, described pre-conditioned comprise:
The event recorder of described keyboard shift key has the event of being triggered, and the position of described cursor is positioned at the position writing data on the described page.
A7, method as according to any one of A1��A6, described judge whether described terminal to be detected exists cheating according to described snoop results after, described method also comprises:
Submitted to the request of data in response to described terminal to be detected by the described page, according to cheating detected result, the data that described terminal to be detected is submitted to by the described page are processed.
The data that described terminal to be detected is submitted to by the described page described are processed by A8, method as described in A7 according to cheating detected result, comprise further:
Described cheating detected result be terminal to be detected there is cheating time, the data submitted to by the described page are tackled so that it is corresponding point of destination cannot be arrived.
B9, a kind of cheating detection device, comprising:
Send unit, be suitable in response to the page presentation request that terminal to be detected triggers, send the page for submitting data to described terminal to be detected;
Monitoring unit, is suitable for monitoring the data writing events that described transmission unit sends the page, to obtain the snoop results of data write;
Judging unit, is suitable for the snoop results according to described monitoring unit and judges whether described terminal to be detected exists cheating.
B10, device as described in B9, described monitoring unit, it is further adapted for the data writing events monitoring the described page, data and write time according to write in the described page determine that described terminal to be detected writes the writing speed of data to the described page, and using said write speed as described snoop results.
B11, device as described in B10, described judging unit, is further adapted for and judges whether said write speed is greater than pre-set velocity, when said write speed is greater than described pre-set velocity, assert that described terminal to be detected exists cheating.
B12, device as described in B9, described monitoring unit, is further adapted for the data writing events monitored in the described page, obtains the focus window when described terminal to be detected writes data to the described page;
Correspondingly, described judging unit, is further adapted for and judges whether described focus window is the described page, when described focus window is not the described page, assert that described terminal to be detected exists cheating.
B13, device as described in B9, described monitoring unit, it is further adapted for the data writing events monitored in the described page, obtain the focus window when described terminal to be detected writes data to the described page, and obtain keyboard state when described terminal to be detected writes data to the described page and cursor state;
Correspondingly, described judging unit, is further adapted for when described focus window is the described page, judges whether described keyboard state or cursor state meet pre-conditioned, if described keyboard state or cursor state all do not meet pre-conditioned, assert that described terminal to be detected exists cheating.
B14, device as described in B13, described keyboard state is the event recorder of keyboard shift key, and described cursor state is the position of cursor;
Correspondingly, described pre-conditioned comprise:
The event recorder of described keyboard shift key has the event of being triggered, and the position of described cursor is positioned at the position writing data on the described page.
B15, device as according to any one of B9��B14, described device also comprises:
Processing unit, be suitable for described judge whether described terminal to be detected exists cheating according to described snoop results after, submitted to the request of data in response to described terminal to be detected by the described page, according to cheating detected result, the data that described terminal to be detected is submitted to by the described page are processed.
B16, device as described in B15, described processing unit, be further adapted for described cheating detected result be terminal to be detected there is cheating time, the data submitted to by the described page are tackled so that it is corresponding point of destination cannot be arrived.
Claims (10)
1. a cheating detection method, comprising:
In response to the page presentation request that terminal to be detected triggers, send the page for submitting data to described terminal to be detected;
Monitor the data writing events of the described page, to obtain the snoop results of data write;
Judge whether described terminal to be detected exists cheating according to described snoop results.
2. the method for claim 1, the data writing events of the described page of described monitoring, to obtain the snoop results of data write, comprises further:
Monitor the data writing events of the described page, determine that described terminal to be detected writes the writing speed of data to the described page according to the data of write in the described page and write time, and using said write speed as described snoop results.
3. according to described snoop results, method as claimed in claim 2, described judges whether described terminal to be detected exists cheating, comprise further:
Judge whether said write speed is greater than pre-set velocity, when said write speed is greater than described pre-set velocity, assert that described terminal to be detected exists cheating.
4. the method for claim 1, the data writing events of the described page of described monitoring, to obtain the snoop results of data write, comprises further:
Monitor the data writing events in the described page, obtain the focus window when described terminal to be detected writes data to the described page;
Correspondingly, described judge whether described terminal to be detected exists cheating according to described snoop results, comprise further:
Judge whether described focus window is the described page, when described focus window is not the described page, assert that described terminal to be detected exists cheating.
5. the method for claim 1, the data writing events of the described page of described monitoring, to obtain the snoop results of data write, comprises further:
Monitor the data writing events in the described page, obtain the focus window when described terminal to be detected writes data to the described page, and obtain keyboard state when described terminal to be detected writes data to the described page and cursor state;
Correspondingly, described judge whether described terminal to be detected exists cheating according to described snoop results, comprise further:
When described focus window is the described page, judge whether described keyboard state or cursor state meet pre-conditioned, if described keyboard state or cursor state all do not meet pre-conditioned, assert that described terminal to be detected exists cheating.
6. method as claimed in claim 5, described keyboard state is the event recorder of keyboard shift key, and described cursor state is the position of cursor;
Correspondingly, described pre-conditioned comprise:
The event recorder of described keyboard shift key has the event of being triggered, and the position of described cursor is positioned at the position writing data on the described page.
7. method as according to any one of claim 1��6, described judge whether described terminal to be detected exists cheating according to described snoop results after, described method also comprises:
Submitted to the request of data in response to described terminal to be detected by the described page, according to cheating detected result, the data that described terminal to be detected is submitted to by the described page are processed.
8. the data that described terminal to be detected is submitted to by the described page described are processed by method as claimed in claim 7 according to cheating detected result, comprise further:
Described cheating detected result be terminal to be detected there is cheating time, the data submitted to by the described page are tackled so that it is corresponding point of destination cannot be arrived.
9. a cheating detection device, comprising:
Send unit, be suitable in response to the page presentation request that terminal to be detected triggers, send the page for submitting data to described terminal to be detected;
Monitoring unit, is suitable for monitoring the data writing events that described transmission unit sends the page, to obtain the snoop results of data write;
Judging unit, is suitable for the snoop results according to described monitoring unit and judges whether described terminal to be detected exists cheating.
10. device as claimed in claim 9, described monitoring unit, it is further adapted for the data writing events monitoring the described page, data and write time according to write in the described page determine that described terminal to be detected writes the writing speed of data to the described page, and using said write speed as described snoop results.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510998130.3A CN105653944B (en) | 2015-12-25 | 2015-12-25 | Cheating detection method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510998130.3A CN105653944B (en) | 2015-12-25 | 2015-12-25 | Cheating detection method and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN105653944A true CN105653944A (en) | 2016-06-08 |
| CN105653944B CN105653944B (en) | 2018-06-12 |
Family
ID=56477972
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510998130.3A Active CN105653944B (en) | 2015-12-25 | 2015-12-25 | Cheating detection method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105653944B (en) |
Cited By (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107644338A (en) * | 2017-09-15 | 2018-01-30 | 维沃移动通信有限公司 | The processing method and mobile terminal of a kind of electronic money |
| CN108346088A (en) * | 2018-02-09 | 2018-07-31 | 上海宝尊电子商务有限公司 | Brand official store malice panic buying preventing control method and system |
| CN108712408A (en) * | 2018-05-08 | 2018-10-26 | 百度在线网络技术（北京）有限公司 | A kind of anti-cheat method and device of user behavior verification |
| CN109194627A (en) * | 2018-08-16 | 2019-01-11 | 深圳乐信软件技术有限公司 | Cheat detection method, device, equipment and medium |
| CN110458308A (en) * | 2019-06-24 | 2019-11-15 | 天津五八到家科技有限公司 | A kind of control method, device and mobile terminal |
| CN110796464A (en) * | 2018-08-03 | 2020-02-14 | 上海晶赞融宣科技有限公司 | Monitoring data anti-cheating method and verification method, device, storage medium and terminal |
| CN111210271A (en) * | 2020-01-03 | 2020-05-29 | 北京字节跳动网络技术有限公司 | Method and device for identifying form cheating, electronic equipment and storage medium |
| CN111641588A (en) * | 2020-04-28 | 2020-09-08 | 深圳壹账通智能科技有限公司 | Webpage analog input detection method and device, computer equipment and storage medium |
| CN111833064A (en) * | 2019-04-17 | 2020-10-27 | 马上消费金融股份有限公司 | Cheating detection method and device |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1940947A (en) * | 2005-09-30 | 2007-04-04 | 腾讯科技（深圳）有限公司 | Method for preventing user from cheating in examination in network game |
| CN101777053A (en) * | 2009-01-08 | 2010-07-14 | 北京搜狗科技发展有限公司 | Method and system for identifying cheating webpages |
| CN103853671A (en) * | 2012-12-07 | 2014-06-11 | 北京百度网讯科技有限公司 | Data writing control method and device |
| CN104050178A (en) * | 2013-03-13 | 2014-09-17 | 北京思博途信息技术有限公司 | Internet monitoring anti-spamming method and device |
-
2015
- 2015-12-25 CN CN201510998130.3A patent/CN105653944B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1940947A (en) * | 2005-09-30 | 2007-04-04 | 腾讯科技（深圳）有限公司 | Method for preventing user from cheating in examination in network game |
| CN101777053A (en) * | 2009-01-08 | 2010-07-14 | 北京搜狗科技发展有限公司 | Method and system for identifying cheating webpages |
| CN103853671A (en) * | 2012-12-07 | 2014-06-11 | 北京百度网讯科技有限公司 | Data writing control method and device |
| CN104050178A (en) * | 2013-03-13 | 2014-09-17 | 北京思博途信息技术有限公司 | Internet monitoring anti-spamming method and device |
Cited By (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107644338A (en) * | 2017-09-15 | 2018-01-30 | 维沃移动通信有限公司 | The processing method and mobile terminal of a kind of electronic money |
| CN108346088A (en) * | 2018-02-09 | 2018-07-31 | 上海宝尊电子商务有限公司 | Brand official store malice panic buying preventing control method and system |
| CN108712408A (en) * | 2018-05-08 | 2018-10-26 | 百度在线网络技术（北京）有限公司 | A kind of anti-cheat method and device of user behavior verification |
| CN110796464A (en) * | 2018-08-03 | 2020-02-14 | 上海晶赞融宣科技有限公司 | Monitoring data anti-cheating method and verification method, device, storage medium and terminal |
| CN109194627A (en) * | 2018-08-16 | 2019-01-11 | 深圳乐信软件技术有限公司 | Cheat detection method, device, equipment and medium |
| CN111833064A (en) * | 2019-04-17 | 2020-10-27 | 马上消费金融股份有限公司 | Cheating detection method and device |
| CN111833064B (en) * | 2019-04-17 | 2022-04-12 | 马上消费金融股份有限公司 | Cheating detection method and device |
| CN110458308A (en) * | 2019-06-24 | 2019-11-15 | 天津五八到家科技有限公司 | A kind of control method, device and mobile terminal |
| CN111210271A (en) * | 2020-01-03 | 2020-05-29 | 北京字节跳动网络技术有限公司 | Method and device for identifying form cheating, electronic equipment and storage medium |
| CN111210271B (en) * | 2020-01-03 | 2023-10-17 | 北京字节跳动网络技术有限公司 | Method, device, electronic equipment and storage medium for identifying form cheating |
| CN111641588A (en) * | 2020-04-28 | 2020-09-08 | 深圳壹账通智能科技有限公司 | Webpage analog input detection method and device, computer equipment and storage medium |
| WO2021218341A1 (en) * | 2020-04-28 | 2021-11-04 | 深圳壹账通智能科技有限公司 | Webpage analog input detection method and apparatus, computer device, and storage medium |
Also Published As
| Publication number | Publication date |
|---|---|
| CN105653944B (en) | 2018-06-12 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN105653944A (en) | Detection method and device of cheating behaviors | |
| US11877152B2 (en) | Method, device, and system of differentiating between a cyber-attacker and a legitimate user | |
| US11310261B2 (en) | Assessing security risks of users in a computing network | |
| US10313389B2 (en) | Computer asset vulnerabilities | |
| US11694293B2 (en) | Techniques for generating analytics based on interactions through digital channels | |
| WO2018126226A1 (en) | Monitoring network security using machine learning | |
| US20090187442A1 (en) | Feedback augmented object reputation service | |
| Howe et al. | Engineering Privacy and Protest: A Case Study of AdNauseam. | |
| Shezan et al. | Read between the lines: An empirical measurement of sensitive applications of voice personal assistant systems | |
| US20230224325A1 (en) | Distributed endpoint security architecture enabled by artificial intelligence | |
| Masood et al. | Touch and you’re trapp (ck) ed: Quantifying the uniqueness of touch gestures for tracking | |
| Binns | Tracking on the Web, Mobile and the Internet of Things | |
| US10015181B2 (en) | Using natural language processing for detection of intended or unexpected application behavior | |
| US9727738B1 (en) | Patch validation via replay and remediation verification | |
| Cai et al. | Resource race attacks on android | |
| Heartfield et al. | Protection against semantic social engineering attacks | |
| WO2022123556A1 (en) | System, device, and method of configuring and automatically operating a user-engagement flow | |
| US10809887B2 (en) | Evaluating user interface efficiency | |
| AlSalamah | Security risk management in online system | |
| US9485242B2 (en) | Endpoint security screening | |
| Ling et al. | A case study of usable security: Usability testing of android privacy enhancing keyboard | |
| KR102586996B1 (en) | Information Security Management Evaluation Solution System | |
| Sharmila et al. | Advanced Cyber Security Helpdesk Using Machine Learning Techniques | |
| CN107728922A (en) | A kind of method and terminal of input validation code | |
| US20230123446A1 (en) | Preventing misdirected password entry |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| CP01 | Change in the name or title of a patent holder |
Address after: 100088 room 112, block D, 28 new street, new street, Xicheng District, Beijing (Desheng Park) Patentee after: BEIJING QIHOO TECHNOLOGY Co.,Ltd. Patentee after: Beijing Qizhi Business Consulting Co.,Ltd. Address before: 100088 room 112, block D, 28 new street, new street, Xicheng District, Beijing (Desheng Park) Patentee before: BEIJING QIHOO TECHNOLOGY Co.,Ltd. Patentee before: Qizhi software (Beijing) Co.,Ltd. |
|
| CP01 | Change in the name or title of a patent holder | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20220329 Address after: 100016 1773, 15 / F, 17 / F, building 3, No.10, Jiuxianqiao Road, Chaoyang District, Beijing Patentee after: Sanliu0 Digital Security Technology Group Co.,Ltd. Address before: 100088 room 112, block D, 28 new street, new street, Xicheng District, Beijing (Desheng Park) Patentee before: BEIJING QIHOO TECHNOLOGY Co.,Ltd. Patentee before: Beijing Qizhi Business Consulting Co.,Ltd. |
|
| TR01 | Transfer of patent right |