CN107018190A

CN107018190A - Recognize method, equipment and the computing device for the application being resident in the webserver

Info

Publication number: CN107018190A
Application number: CN201710206018.0A
Authority: CN
Inventors: 邓金城
Original assignee: Beijing Knownsec Information Technology Co Ltd
Current assignee: Beijing Knownsec Information Technology Co Ltd
Priority date: 2017-03-31
Filing date: 2017-03-31
Publication date: 2017-08-04
Anticipated expiration: 2037-03-31
Also published as: CN107018190B

Abstract

The invention discloses a kind of method for the application for recognizing and being resident in the webserver, suitable for being performed in computing device, computing device is couple to the storage device at least one application structure feature that is stored with, and each application structure feature corresponds to an application, and the method comprising the steps of：Application structure feature is obtained from storage device, application structure feature includes applying tree structure, is generated using bibliographic structure of the tree structure based on application；The architectural feature of the webserver is generated, the architectural feature of the webserver includes the tree structure of the webserver, bibliographic structure generation of the tree structure based on the webserver of the webserver；And determine whether acquired application structure feature matches with the architectural feature of the webserver, if the two is matched, it is determined that be populated with the application corresponding with the application structure feature in the webserver.The invention also discloses a kind of equipment, computing device and the computer-readable recording medium of the application for recognizing and being resident in the webserver.

Description

Recognize method, equipment and the computing device for the application being resident in the webserver

Technical field

The present invention relates to technical field of network security, more particularly to a kind of side for recognizing the application being resident in the webserver Method, equipment and computing device.

Background technology

As the developing rapidly of the network communications technology, institute's carrying information become increasingly abundant, internet turns into human society Important infrastructure, increasing enterprise or it is personal by the application be resident in the webserver and server to Family provides Web content and service.

These application because its ease for use, be easy to exploitation and opening make it obtain widely making on the webserver With, and have the characteristics that：Sensitive data is able to access that, species complexity is various, updates extremely frequent, many is further comprises sometimes Third-party software library.Based on these features, the application that network attack is often resident using in the webserver is target.For example not Method molecule often breaks through the security system of the webserver using the improper configuration and security breaches applied in the webserver. Therefore, the application being resident in the webserver is accurately identified to safeguarding that network security is significant.

It is typically that the application being resident in the webserver is recognized using employing fingerprint matching process at present, for example can be to Some static file of webserver active request, by judging that the static file whether there is or the static file content Determine whether to be populated with some application in the webserver with the presence or absence of some feature (such as some keyword).However, should Feature may be changed by user in secondary development, and the webserver is when disposing the static file of existing characteristics Its absolute path may be changed, so as to cause that the discrimination of employing fingerprint matching process is relatively low, rate of false alarm is higher.

Therefore, in the urgent need to a kind of scheme of application resident in more advanced identification webserver.

The content of the invention

Therefore, the present invention provide it is a kind of recognize the webserver in be resident application scheme, with try hard to solve or extremely Alleviate at least one problem existed above less.

According to an aspect of the invention, there is provided a kind of method for recognizing the application being resident in the webserver, is suitable to Performed in computing device, computing device is couple to the storage device at least one application structure feature that is stored with, each application Architectural feature corresponds to an application, and the method comprising the steps of：Application structure feature, application structure feature are obtained from storage device Including applying tree structure, generated using bibliographic structure of the tree structure based on application；The architectural feature of the webserver is generated, The architectural feature of the webserver includes the tree structure of the webserver, and the tree structure of the webserver is based on network service The bibliographic structure generation of device；And determine whether acquired application structure feature matches with the architectural feature of the webserver, If the two is matched, it is determined that the application corresponding with the application structure feature is populated with the webserver.

According to another aspect of the present invention there is provided a kind of equipment for the application for recognizing and being resident in the webserver, this sets The standby storage device for being couple at least one application structure feature that is stored with, each application structure feature corresponds to an application, The equipment includes：Feature acquisition module, suitable for obtaining application structure feature from storage device, application structure feature includes utility tree Shape structure, is generated using bibliographic structure of the tree structure based on application；Feature generation module, the knot suitable for generating the webserver Structure feature, the architectural feature of the webserver includes the tree structure of the webserver, and the tree structure of the webserver is based on The bibliographic structure generation of the webserver；And feature comparing module, it is adapted to determine that acquired application structure feature and network Whether the architectural feature of server matches, if the two is matched, it is determined that be populated with the webserver and the application structure feature Corresponding application.

According to another aspect of the present invention there is provided a kind of computing device, including：One or more processors；Memory； And one or more programs, wherein one or more program storages in memory and are configured as by one or more processing Device is performed, and one or more programs include the method for being used to perform the application being resident in the identification webserver according to the present invention In either method instruction.

According to the one side that also has of the present invention, there is provided a kind of computer-readable storage for storing one or more programs Medium, one or more programs include instruction, and the instruction is when executed by a computing apparatus so that computing device is according to this hair Either method in the method for the application being resident in the bright identification webserver.

According to the scheme for the application being resident in the identification webserver of the present invention, the general of application structure feature is introduced Read, application structure feature includes the application tree structure of the bibliographic structure generation based on application, using dynamic resource, using static state Resource, can more accurately embody the characteristics of applying.The present invention is special by the architectural feature and application structure for comparing the webserver Levy and whether match to determine whether the webserver is populated with the application, be greatly improved the degree of accuracy using identification, and have The possibility of effect reduction wrong report.

Brief description of the drawings

In order to realize above-mentioned and related purpose, some illustrative sides are described herein in conjunction with following description and accompanying drawing Face, these aspects indicate the various modes of principles disclosed herein that can put into practice, and all aspects and its equivalent aspect It is intended to fall under in the range of theme claimed.The following detailed description by being read in conjunction with the figure, the disclosure it is above-mentioned And other purposes, feature and advantage will be apparent.Throughout the disclosure, identical reference generally refers to identical Part or element.

Fig. 1 shows the structured flowchart of the computing device 100 according to an exemplary embodiment of the present invention；

Fig. 2 shows the structure of the network environment of the computing device 100 according to an exemplary embodiment of the present invention Block diagram；

Fig. 3 is shown according to application resident in the identification webserver of an exemplary embodiment of the present invention The flow chart of method 300；

Fig. 4 shows the schematic diagram of application tree structure according to one exemplary embodiment；

Fig. 5 shows the signal of the tree structure feature of the webserver according to one exemplary embodiment Figure；

Fig. 6 shows showing for the tree structure feature of the webserver according to another illustrative embodiments of the invention It is intended to；And

Fig. 7 is shown according to application resident in the identification webserver of an exemplary embodiment of the present invention The structured flowchart of equipment 700.

Embodiment

The exemplary embodiment of the disclosure is more fully described below with reference to accompanying drawings.Although showing the disclosure in accompanying drawing Exemplary embodiment, it being understood, however, that may be realized in various forms the disclosure without should be by embodiments set forth here Limited.On the contrary, these embodiments are provided to facilitate a more thoroughly understanding of the present invention, and can be by the scope of the present disclosure Complete conveys to those skilled in the art.

Fig. 1 shows the structured flowchart of computing device 100 according to an illustrative embodiment of the invention.The computing device 100 can be implemented as server, such as file server, database server, apps server and the webserver, It can also be embodied as including desktop computer and the personal computer of notebook computer configuration.In addition, computing device 100 may be used also To be embodied as a part for portable (or mobile) electronic equipment of small size, these electronic equipments can be such as cell phone, Personal digital assistant (PDA), personal media player device, wireless network browsing apparatus, personal helmet, application specific are set It is standby or the mixing apparatus of any of the above function can be included.

In basic configuration 102, computing device 100 typically comprise system storage 106 and one or more at Manage device 104.The communication that memory bus 108 can be used between processor 104 and system storage 106.

Depending on desired configuration, processor 104 can be any kind of processing, include but is not limited to：Microprocessor ((μ P), microcontroller (μ C), digital information processor (DSP) or any combination of them.Processor 104 can include all Cache, processor core such as one or more rank of on-chip cache 110 and second level cache 112 etc 114 and register 116.The processor core 114 of example can include arithmetic and logical unit (ALU), floating-point unit (FPU), Digital signal processing core (DSP core) or any combination of them.The Memory Controller 118 of example can be with processor 104 are used together, or in some implementations, Memory Controller 218 can be an interior section of processor 104.

Depending on desired configuration, system storage 106 can be any type of memory, include but is not limited to：Easily The property lost memory (RAM), nonvolatile memory (ROM, flash memory etc.) or any combination of them.System is stored Device 106 can include operating system 120, one or more program 122 and routine data 124.In some embodiments, Program 122, which can be configured as being performed using routine data 124 by one or more processor 104 on an operating system, to be referred to Order.

Computing device 100 can also include contributing to from various interface equipments (for example, output equipment 142, Peripheral Interface 144 and communication equipment 146) to basic configuration 102 via the communication of bus/interface controller 130 interface bus 140.Example Output equipment 142 include graphics processing unit 148 and audio treatment unit 150.They can be configured as contributing to via One or more A/V port 152 is communicated with the various external equipments of such as display or loudspeaker etc.Outside example If interface 144 can include serial interface controller 154 and parallel interface controller 156, they can be configured as contributing to Via one or more I/O port 158 and such as input equipment (for example, keyboard, mouse, pen, voice-input device, touch Input equipment) or the external equipment of other peripheral hardwares (such as printer, scanner) etc communicated.The communication of example is set Standby 146 can include network controller 160, and it can be arranged to be easy to via one or more COM1 164 and one The communication that other individual or multiple computing devices 162 pass through network communication link.

Network communication link can be an example of communication media.Communication media can be generally presented as in such as carrier wave Or computer-readable instruction in the modulated data signal of other transmission mechanisms etc, data structure, program module, and can With including any information delivery media." modulated data signal " can such signal, one in its data set or many It is individual or it change can the mode of coding information in the signal carry out.As nonrestrictive example, communication media can be with Include the wire medium of such as cable network or private line network etc, and it is such as sound, radio frequency (RF), microwave, infrared (IR) the various wireless mediums or including other wireless mediums.Term computer-readable medium used herein can include depositing Both storage media and communication media.

Fig. 2 shows the structural frames of the network environment of computing device 100 according to one exemplary embodiment Figure.As shown in Fig. 2 computing device 100 is with that will recognize that the webserver 120 of wherein resident application is connected by internet Connect, the webserver 120 has the default addresses for use of the corresponding webserver 120.Computing device 100 is additionally coupled to deposit simultaneously The storage device 140 of at least one application structure feature is contained, each application structure feature corresponds to an application.

Wherein, one or more programs 122 of computing device 100 include being used to perform being taken according to the identification network of the present invention The instruction for any one of the method for application resident in device 120 of being engaged in.The method for recognizing the application being resident in the webserver 120 The network can be determined by generating the architectural feature of the webserver 120 and comparing it with whether application structure feature matches Whether server 120 is populated with the corresponding application of application structure feature, so as to greatly improve the degree of accuracy using identification, And effectively reduce the possibility of wrong report.

Fig. 3 shows the side for the application being resident in the identification webserver according to one exemplary embodiment The structured flowchart of method 300.As shown in figure 3, the method 300 for the application being resident in the identification webserver 120 starts from step S320.

In step s 320, application structure feature is obtained from storage device 140, application structure feature includes applying tree-like knot Structure, this is using bibliographic structure generation of the tree structure based on application.

The generating process to application architectural feature is described below.

According to an embodiment of the invention, the webserver for being only populated with some application can be built in advance, and Obtain the access log of the webserver.Access log includes the access request of the content provided the webserver, generally The content of webserver offer can be captured by web crawlers and generated, and there is no hyperlink sensing, net for those The content (such as backstage related content) that network reptile can not capture, its access log can be by analyzing the source code of the webserver Structure obtains the network address of the content on the webserver, actively sends access request and generate.

The application structure feature of the application can be generated according to acquired access log.Specifically, according to access log Comprising the bibliographic structure that can be applied of access request, the then bibliographic structure generation based on the application applies tree-like knot Structure.It is to be appreciated that access request includes the default addresses for use by the webserver and the path relative to default addresses for use is constituted The network address, such as www.knownsec.com/about/intro/image.jpg, www.knownsec.com is network The default addresses for use of server ,/about/intro/image.jpg is the path relative to default addresses for use.

Generally comprised in path in the multiple subdirectories separated with list separator "/", such as path/about/intro Include subdirectory about and subdirectory intro.File identification can also be included in path, for example path/about/ Include subdirectory about, subdirectory intro and file identification image.jpg in intro/image.jpg.

Subdirectory and the hierarchical structure of subdirectory that the path of these in access log is included are the bibliographic structure of application, its In the default addresses for use of the webserver built in advance be root.Then the bibliographic structure of application is showed i.e. with tree-like To apply tree structure, wherein application tree structure is sub- section by root node, subdirectory of root in the bibliographic structure applied Point.Fig. 4 shows the schematic diagram of application tree structure according to one exemplary embodiment, as shown in figure 4, root section The hierarchical relationship of link correspondence subdirectory between point correspondence root, one subdirectory of each child node correspondence, child node.

Due to only having built an application on the webserver, therefore, the application tree structure so obtained is anti-well The characteristics of applying is reflected.

According to an embodiment of the invention, application structure feature can also include applying dynamic resource.Using dynamic Resource includes path of the living document relative to root under some subdirectory in the bibliographic structure of application, it is possible to root The access request to living document included according to above-mentioned access log is obtained.Wherein, living document generally includes file identification Middle suffix is php file.

Specifically, the phase included in the access request in access log to living document, acquired access request is obtained Living document is indicated under which subdirectory in the bibliographic structure of application for the path of default addresses for use, then obtain these Path in access request relative to default addresses for use is to have obtained applying dynamic resource.For example, it is assumed that access request includes phase For the path admin/login.php of default addresses for use, that is, indicate and included under the bibliographic structure subdirectories admin of application There is living document login.php, then application dynamic resource is then admin/login.php.

According to an embodiment of the invention, application structure feature can also include applying static resource, using static state Resource include specific static file in the bibliographic structure of application under some subdirectory relative to the path of root and The content characteristic included in the static file.Similarly, pair that can be included using static resource according to above-mentioned access log The access request of static file and known application static nature are obtained.Wherein, after static file is generally included in file identification Sew for html, css, txt etc. file, generally included using static nature：There is the static file that path includes route characteristic, And the content of the static file includes content characteristic.For example, using Discuz！Application static nature include to there is path Robots.txt static file, and the content of the static file includes robots.txt for Discuz！Board.Specifically Static file refers to meeting the static file using static nature.

Specifically, obtain that path in access log includes route characteristic and network server response please in the access Include content characteristic, access request to static file in the static file content asked and returned, acquired access please The path relative to default addresses for use included in asking indicates to meet is located at application using the specific static file of static nature Bibliographic structure under which subdirectory, then obtain path in these access requests relative to default addresses for use, along with this It is to have obtained applying static resource using the content characteristic in static nature.For example, using WordPress application static nature For：There is the static file that path includes wp-content/themes/twentyten/style.css, and the static file Content includes http://wordpress.org/.In acquired access log, the path existed relative to default addresses for use is The admin/wp-content/themes/twentyten/style.css access request to static file, and network service Include http in the content for the static file that device is returned in response to the access request://wordpress.org/, then should Access request, which indicates to include under the subdirectory twentyten in the bibliographic structure of application, to be met using the quiet of static nature State file style.css, then application static resource is then admin/wp-content/themes/twentyten/ Style.css applies the content characteristic http in static nature with this://wordpress.org/.

Further, in order to remove possible disturbing factor, make the feature of acquisition more unique, application that can also be to obtaining Application tree structure and application dynamic resource in architectural feature carry out duplicate removal processing.According to an embodiment of the invention, To the multiple application structure features generated, it can calculate and (for example be repeated using the multiplicity of each child node in tree structure Number of times) and deletion multiplicity exceedes using the multiplicity in each path in dynamic resource, and in each application structure feature The child node of the application tree structure of threshold value (such as number of repetition is more than 1 time) and the path of application dynamic resource.So most The application tree structure and application dynamic resource child nodes and number of paths obtained afterwards is more simplified, probably on 2 to 5 left sides It is right so that when subsequently being matched according to application structure feature both to have simplified workload while or not losing the degree of accuracy.

Then in step S340, the architectural feature of the webserver 120, the architectural feature of the webserver 120 are generated Tree structure including the webserver, bibliographic structure life of the tree structure based on the webserver of the webserver 120 Into.

The generating process to the architectural feature of the webserver 120 is described below.

According to an embodiment of the invention, access of the webserver 120 in the range of the scheduled time can be obtained Daily record.Access log includes the access request of the content provided the webserver 120, generally can be from the webserver 120 The mirror port of the network switching equipment in the third party's monitoring system or network environment of access and obtain.It may be noted that Be, the access log acquired in the present invention be after over cleaning, (conditional code of such as return is for network server response success 200) normal access log.

The architectural feature of the webserver 120 is then generated according to acquired access log.

Wherein it is possible to which the access request included according to access log obtains the bibliographic structure of the webserver 120, then Bibliographic structure based on the webserver 120 generates the tree structure of the webserver 120.It is to be appreciated that access request bag In the network address constituted containing the default addresses for use by the webserver 120 and the path relative to default addresses for use, path generally Include the multiple subdirectories separated with list separator "/", file identification can also be included.

Subdirectory and the hierarchical structure of subdirectory that the path of these in access log is included are the mesh of the webserver 120 Directory structures.Then by the bibliographic structure of the webserver 120 with the tree-like tree-like knot showed as the webserver 120 Structure, the wherein tree structure of the webserver 120 are by root node of the default addresses for use of the webserver 120, the webserver 120 Bibliographic structure in subdirectory be child node.

According to an embodiment of the invention, the architectural feature of the webserver 120 can also include the webserver 120 dynamic resource.The dynamic resource of the webserver 120 includes the living document of the offer of the webserver 120 relative to net The path of the default addresses for use of network server 120, it is possible to which the access request to living document included according to access log is obtained Arrive.Wherein, living document generally includes the file that suffix in file identification is php.Specifically, obtain in access log to dynamic The path of the default addresses for use relative to the webserver 120 included in the access request of file, that is, obtained the webserver 120 dynamic resource.

According to an embodiment of the invention, the architectural feature of the webserver 120 can also include the webserver 120 static resource, the static resource of the webserver 120 includes static file and the static state that the webserver 120 is provided Path of the file relative to the default addresses for use of the webserver 120.Static file generally include in file identification suffix be html, Css, txt etc. file.

Specifically, it can obtain in access log to including in the access request of static file relative to default addresses for use Path, and after to the webserver 120 send the access request with obtain the webserver 120 return static file, so The static resource of the webserver 120 is obtained.

The principle of the architectural feature of the above-mentioned generation webserver 120 is identical with the principle for generating application structure feature, because Here generating process no longer to the tree structure of the webserver 120 is deployed to be described in detail.

After the architectural feature for obtaining application structure feature and the webserver 120, in step S360, it is determined that acquired Application structure feature whether matched with the architectural feature of the webserver 120, if the two match, it is determined that the webserver The application corresponding with the application structure feature is populated with 120.

Normally, it is determined that the step whether acquired application structure feature matches with the architectural feature of the webserver 120 It is rapid to can include determining that using tree structure and the tree structure of the webserver 120, using dynamic resource and the webserver Whether 120 dynamic resource and static and the webserver 120 the static resource of application match, when matching for this three, Then determine that application structure feature is matched with the architectural feature of the webserver 120, then determine to be populated with the webserver 120 The application corresponding with the application structure feature.But in some embodiments it is possible to select when determination application structure feature When being matched with one in the architectural feature of the webserver 120 or binomial, it is determined that application structure feature and the webserver 120 architectural feature matching, and then determine to be populated with the application corresponding with the application structure feature in the webserver 120, The present invention is without limitation.

A pair determination is retouched using tree structure with the process whether tree structure of the webserver 120 matches below State.

In some implementations, the application of the webserver 120 is resided under the default addresses for use of the webserver 120, that The corresponding subdirectory of the child node and son in application tree structure can be obtained to each child node in application tree structure Path of the catalogue relative to root in the bibliographic structure of application.Then in the tree structure of Network Search server 120 whether It is equal in the presence of the path corresponding to the acquired default addresses for use of subdirectory and subdirectory relative to the webserver 120 and is obtained The child node in the path taken, if so, then the lookup result of the child node for exist, otherwise in the absence of.Its subdirectories is relative In the bibliographic structure of application root, the default addresses for use of the webserver 120 path can respectively application tree structure, Connection relationship in the tree structure of the webserver 120 according to child node is obtained.

For example, it is assumed that the application tree structure obtained is as shown in figure 4, the tree structure of the webserver 120 of generation is special Levy as shown in Figure 5.Correspond to subdirectory data, mesh of the subdirectory relative to application using the child node data in tree structure The path of root is views/data in directory structures.Correspond to son it is apparent that existing in the tree structure of the webserver 120 Catalogue data child node, and subdirectory data is views/data relative to the path of the default addresses for use of the webserver 120, Equal to the path of root in its bibliographic structure relative to application.Therefore, the lookup result of this child node is presence.

After so searching each child node in application tree structure, if the lookup result of each child node is to deposit It can then determine, using tree structure and the matching of the tree structure of the webserver, otherwise to mismatch.

According to an embodiment of the invention, it is contemplated that the catalogue of the webserver 120 obtained according to access log Structure there may be missing, therefore, if the lookup result for having child node is in the absence of can be to lookup result to be non-existent Child node, the access request to the corresponding subdirectory of the child node is sent to the webserver 120, and the access request is based on network The default addresses for use and subdirectory of server 120 relative to root in the bibliographic structure of application coordinates measurement, for example, it is assumed that not The subdirectory of presence relative to root in the bibliographic structure of application path be views/re, the webserver 120 it is default Address is xx.com, then the access request request generated accesses xx.com/views/re.

Send after access request, the content that can be returned according to the webserver 120 in response to the access request enters one Step determines whether the tree structure of application tree structure and the webserver 120 matches, so as to further improve the accurate of identification Property, it is to avoid mistakes and omissions.If for example, the conditional code returned is 200, it is considered that existing in the bibliographic structure of the webserver 120 The subdirectory, the lookup result of the child node should be presence.If the conditional code returned is 404, it is considered that the webserver Be not present the subdirectory in 120 bibliographic structure, the lookup result of the child node be still in the absence of.

After so further determining that, if still have child node lookup result be in the absence of, then can determine application Tree structure and the tree structure of the webserver 120 are mismatched, and are otherwise matched.

A pair determination is retouched using dynamic resource with the process whether dynamic resource of the webserver 120 matches below State.

, can be to whether there is the road in the dynamic resource of Network Search server to each path in application dynamic resource Footpath, if the lookup result in each path is presence, it is determined that matched using dynamic resource with the dynamic resource of the webserver, Otherwise mismatch.

Matching with tree structure identically, according to an embodiment of the invention, if the lookup result for having path is It is not present, can is non-existent path to lookup result, the access request to the path, the access are sent to the webserver Ask default addresses for use and the coordinates measurement based on the webserver.Returned according to the webserver 120 in response to access request The content returned is further determined that using whether the dynamic resource of dynamic resource and the webserver 120 matches.

For example, if the conditional code returned is 200, the lookup result in the path should be presence.If the conditional code returned is 404, then the lookup result in the path still be in the absence of.If the lookup result for so still having path be in the absence of, then can be with It is determined that being mismatched using the dynamic resource of dynamic resource and the webserver 120, otherwise match.

A pair determination is retouched using dynamic resource with the process whether static resource of the webserver 120 matches below State.

To each path and content characteristic in application static resource, in the static resource of Network Search server 120 whether The content characteristic is included in the presence of the corresponding static file in the path and the path.If being deposited in the static resource of the webserver 120 In the path, and the corresponding static file in the path includes the content characteristic, and the lookup result of the path and content characteristic is In the presence of, otherwise in the absence of.

If the lookup result of each path and content characteristic is presence, it is determined that apply static resource and the webserver 120 static resource matching, is otherwise mismatched.

Matching with tree structure identically, according to an embodiment of the invention, if having path and content characteristic Lookup result be in the absence of, can to lookup result be non-existent path and content characteristic, to the webserver send to this The access request in path, default addresses for use of the access request based on the webserver 120 and the coordinates measurement.

Further determined that according to network server response in the content that access request is returned using static resource and network Whether the static resource of server matches.If for example, the conditional code returned includes content for the static file of 200 and return Feature, then the lookup result of the path and content characteristic should be presence.If the conditional code returned is 200 but the static state text of return Part, which does not include, content characteristic, or the conditional code returned is 404, then the lookup result of the path and content characteristic is still not deposit .If so still have path and content characteristic lookup result be in the absence of, then can determine to apply static resource and net The static resource of network server 120 is mismatched, and is otherwise matched.

In some more realizations, the application of the webserver 120, which does not have, resides in lacking for the webserver 120 Under province address, then then it needs to be determined that default relative to the webserver 120 using the catalogue being resident in the webserver 120 The path of address.

The process for now determining whether to match using tree structure and the tree structure of the webserver 120 is carried out below Description.

It can obtain using the corresponding subdirectory of a child node and the subdirectory in tree structure relative to application The path of root in bibliographic structure.It then whether there is in the tree structure of Network Search server and correspond to acquired son Catalogue and subdirectory include the child node in acquired path relative to the path of the default addresses for use of the webserver 120.If Be, then the lookup result of the child node for exist, otherwise in the absence of.If lookup result is in the absence of repeating above-mentioned acquisition And finding step, it is that whole child nodes have been searched and are in the presence of untill or in application tree structure until lookup result Only.

If being to be not present using the lookup result of whole child node in tree structure, it may be determined that application tree structure with The tree structure of the webserver 120 is mismatched.In addition, according to an embodiment of the invention, can also be to network service Device 120 sends the access request to each child node correspondence subdirectory in application tree structure, further determines that lookup result is No to exist, default addresses for use and subdirectory of the access request based on the webserver 120 are relative to root in the bibliographic structure of application The coordinates measurement of catalogue.If the lookup result for so still having child node be in the absence of, it is determined that application tree structure and network take The tree structure of business device 120 is mismatched, and is otherwise matched.

After the child node for lookup result occur to exist, by the corresponding subdirectory of the child node found relative to net The path of the default addresses for use of network server 120 removes the path of root in its bibliographic structure relative to application, to obtain net Using the path of resident default addresses for use of the catalogue relative to the webserver 120 in network server 120.

For example, it is assumed that the application tree structure obtained is as shown in figure 4, the tree structure of the webserver 120 of generation is special Levy as shown in Figure 6.Correspond to subdirectory data, mesh of the subdirectory relative to application using the child node data in tree structure The path of root is views/data in directory structures.It can be seen that, exist in the tree structure of the webserver 120 and correspond to Subdirectory data child node, and subdirectory data is test/ relative to the path of the default addresses for use of the webserver 120 Views/data, it obviously includes paths of the subdirectory data relative to root in the bibliographic structure of application.Therefore, this The lookup result of child node is presence.It is by the obtained path test/ of test/views/data removals views/data then Using the path of resident default addresses for use of the catalogue relative to the webserver 120 in the webserver 120.

Obtain the path using resident default addresses for use of the catalogue relative to the webserver 120 in the webserver 120 Afterwards, can to application tree structure in each child node, or except above-mentioned lookup result for exist child node in addition to its His child node, addition application is stayed behind the path of root in bibliographic structure of the corresponding subdirectory of the child node relative to application The catalogue stayed then is searched whether relative to the path of the default addresses for use of the webserver in the tree structure of the webserver It is equal to what addition was obtained relative to the path of the default addresses for use of the webserver 120 in the presence of corresponding to the subdirectory and subdirectory The child node in path.For example, using resident default addresses for use of the catalogue relative to the webserver 120 in the webserver 120 Path be test/, subdirectory relative to root in the bibliographic structure of application path be views/show, then add The path arrived is then test/views/show.

If the lookup result of each child node is presence, it is determined that the tree-like knot of application tree structure and the webserver Structure is matched, and is otherwise mismatch.

It is follow-up to search less than child node process step, determine moving for application dynamic resource and the webserver 120 State resource whether match and to search less than path processing the step of, determine apply static resource and the webserver 120 static resource whether match and to search less than path and content characteristic processing the step of, with above-mentioned network take The difference that the application of business device 120 resides in corresponding step when under the default addresses for use of the webserver 120 is：Need answering Path with tree structure subdirectories relative to the path of root in the bibliographic structure of application, in application dynamic resource, And resident catalogue being default to relative to the webserver of acquired application is added behind the path in application static resource The path of location, then searched in the dynamic resource and static resource of the webserver based on the obtained path of addition or to The webserver sends the access request in the path obtained to addition, other processing all sames in addition to this difference, therefore this Place is repeated no more.

It is worth noting that, the implication for the "comprising" being previously mentioned in above-mentioned processing includes " being equal to ", therefore obtaining network When in server 120 using the path of resident default addresses for use of the catalogue relative to the webserver 120, if the son section found The path of corresponding default addresses for use of the subdirectory relative to the webserver 120 of point is equal in its bibliographic structure relative to application The path of root, then the path obtained after removal is nothing, that is to say, that the application of the webserver 120 resides in the network Under the default addresses for use of server 120, then the application that processing now is essentially equivalent to the webserver 120 resides in the network Processing when under the default addresses for use of server 120.

Finally, according to the yet another embodiment of the present invention, multiple application structures can be obtained from storage device 140 special Levy.To acquired each application structure feature, it may be determined that the application structure feature and the webserver 120 that is generated Whether architectural feature matches, if the two is matched, it is determined that be populated with the webserver 120 corresponding with the application structure feature Application.So, you can obtain the multiple applications being resident in the webserver 120.

The present invention also proposes a kind of computer-readable recording medium for storing one or more programs, one or more programs Including instruction, the instruction by computing device 100 when being performed so that computing device 100 performs the identification network according to the present invention Either method in the method for the application being resident in server.

Fig. 7 shows setting for the application being resident in the identification webserver according to one exemplary embodiment Standby 700 structured flowchart.As shown in fig. 7, the equipment 700 is couple to the storage device at least one application structure feature that is stored with 140, each application structure feature corresponds to an application, and the equipment 700 includes feature acquisition module 720, feature generation module 740 and feature comparing module 760.

Feature acquisition module 720 is suitable to obtain application structure feature from storage device 140, and application structure feature includes application Tree structure, this is using bibliographic structure generation of the tree structure based on the application.

Feature generation module 740 is suitable to the architectural feature of the generation webserver 120, and the structure of the webserver 120 is special Levying includes the tree structure of the webserver 120, catalogue of the tree structure based on the webserver 120 of the webserver 120 Structural generation.

The feature comparing module 760 being connected respectively with feature acquisition module 720 and feature generation module 740 is then adapted to determine that Whether acquired application structure feature matches with the architectural feature of the webserver 120, if the two is matched, it is determined that network takes The application corresponding with the application structure feature is populated with business device 120.

According to an embodiment of the invention, saved using tree structure by son of the subdirectory in the bibliographic structure applied Point, feature generation module 740 is suitable to obtain access log of the webserver 120 in the range of the scheduled time, according to access day Will generates the architectural feature of the webserver.Wherein, the tree structure of the webserver is generated, including：According to access log institute Comprising access request obtain the bibliographic structure of the webserver 120, the bibliographic structure generation network based on the webserver 120 The tree structure of server 120, the tree structure of the webserver 120 is with the specific item in the bibliographic structure of the webserver 120 Record as child node.Feature comparing module 760 be then adapted to determine that using tree structure and the webserver tree structure whether Match somebody with somebody, including：To using each child node in tree structure, obtaining using the corresponding subdirectory of the child node in tree structure and being somebody's turn to do Subdirectory relative to root in the bibliographic structure of application path, in the tree structure of Network Search server with the presence or absence of pair The path of the default addresses for use of subdirectory and subdirectory relative to the webserver 120 acquired in Ying Yu is equal to acquired road The child node in footpath.If the lookup result of each child node is presence, it is determined that application tree structure and the webserver 120 Tree structure is matched.

In addition, feature comparing module 760 is further adapted for being non-existent child node to lookup result, to the webserver 120 Send to the access request of the corresponding subdirectory of the child node, default addresses for use of the access request based on the webserver 120 and Coordinates measurement of the subdirectory relative to root in the bibliographic structure of application.Then according to the webserver 120 in response to the visit The content asked request and returned determines whether the tree structure of application tree structure and the webserver matches.

According to an embodiment of the invention, application structure feature can also include applying dynamic resource, using dynamic Resource includes path of the living document relative to root under some subdirectory in the bibliographic structure of application.Network service The architectural feature of device 120 also includes the dynamic resource of the webserver 120, and the dynamic resource of the webserver 120 includes network The path for default addresses for use of the living document relative to the webserver 120 that server 120 is provided, feature generation module 740 is then The access request to living document suitable for being included according to access log obtains the living document phase of the offer of the webserver 120 For the path of the default addresses for use of the webserver 120.

Feature comparing module 760, which is then adapted to determine that, applies whether dynamic resource matches with the dynamic resource of the webserver, Including：To each path in application dynamic resource, the path is whether there is in the dynamic resource of Network Search server 120；If The lookup result in each path is presence, it is determined that matched using dynamic resource with the dynamic resource of the webserver 120.This Outside, it is non-existent path to lookup result, the access request to the path, the access can be sent to the webserver 120 Ask default addresses for use and the coordinates measurement based on the webserver.Then according to the webserver 120 in response to access request And the content returned determines whether the dynamic resource of application dynamic resource and the webserver matches.

According to an embodiment of the invention, application structure feature can also include applying static resource, using static state Resource include specific static file in the bibliographic structure of application under some subdirectory relative to the path of root and The content characteristic included in static file.The architectural feature of the webserver 120 can also include the static money of the webserver Source, the static resource of the webserver 120 includes the static file and static file of the offer of the webserver 120 relative to network The path of the default addresses for use of server 120.Feature generation module 740 be suitable to according to access log included to static file Access request obtains the default addresses for use of static file and the static file relative to the webserver of the offer of the webserver 120 Path.

Feature comparing module 760, which is then adapted to determine that, applies whether static resource matches with the static resource of the webserver, Including：To each path and content characteristic in application static resource, whether there is in the static resource of Network Search server should The corresponding static file in path and the path includes the content characteristic.If the lookup result of each path and content characteristic is In the presence of, it is determined that matched using static resource with the static resource of the webserver.Further, it is also possible to be not deposit to lookup result Path and content characteristic, send the access request to the path to the webserver 120, the access request based on network take The default addresses for use and the coordinates measurement of business device 120.The content then returned according to the webserver 120 in response to access request It is determined that whether being matched using the static resource of static resource and the webserver.

On the other hand, according to an embodiment of the invention, storage device 140 can obtain it is building in advance, only stay Leave the access log of the webserver of the application.The catalogue knot that the access request included according to access log is applied Tree structure is applied in structure, the bibliographic structure generation based on application.Please according to the access to living document that access log is included Ask and obtain being located at path of the living document relative to root in the bibliographic structure of application under some subdirectory.According to access day The access request to static file that will is included obtains specific quiet under some subdirectory in the bibliographic structure of application Path of the state file relative to root.Further, storage device 140 is further adapted for special to the multiple application structures generated Levy, the multiplicity of each child node and the multiplicity using each path in dynamic resource in application tree structure are calculated respectively. To each application structure feature generated, child node and application dynamic that multiplicity in application tree structure exceedes threshold value are deleted Multiplicity exceedes the path of threshold value in resource.

According to an embodiment of the invention, feature comparing module is suitable to obtain a son section in application tree structure The corresponding subdirectory of point and the subdirectory are relative to the path of root in the bibliographic structure of application, Network Search server 120 Tree structure in whether there is correspond to acquired subdirectory and subdirectory being default to relative to the webserver 120 The path of location includes the child node in acquired path.Then by the corresponding subdirectory of the child node found relative to network The path of the default addresses for use of server 120 removes the path of root in its bibliographic structure relative to application, to obtain network Using the path of resident default addresses for use of the catalogue relative to the webserver 120 in server 120.Then, it is tree-like to application Each child node or other child nodes in structure, in bibliographic structure of the corresponding subdirectory of the child node relative to application The path of resident default addresses for use of the catalogue relative to the webserver 120 of addition application behind the path of root, in network clothes It is engaged in searching whether to exist corresponding to the subdirectory and subdirectory lacking relative to the webserver 120 in the tree structure of device 120 The path of province address is equal to the child node in the path that addition is obtained.If the lookup result of each child node is presence, it is determined that Matched using tree structure and the tree structure of the webserver.In addition, feature comparing module 760 is further adapted in application dynamic money Resident catalogue being default to relative to the webserver of addition application behind the path in path and application static resource in source The path of location, is searched based on the obtained path of addition in the dynamic resource and static resource of the webserver or to net Network server sends the access request in the path obtained to addition.

According to the yet another embodiment of the present invention, feature acquisition module 720 is suitable to obtain multiple from storage device 140 Application structure feature, feature comparing module 760 is suitable to acquired each application structure feature, determines the application structure feature Whether matched with the architectural feature of the webserver 120 generated, if the two is matched, it is determined that stayed in the webserver 120 Leave the application corresponding with the application structure feature.

The specific of the Method And Principle for the application being resident above in the identification webserver 120 is illustrated with reference to Fig. 1~Fig. 6 being retouched State and the respective handling in each module is explained in detail, no longer duplicate contents are repeated here.

It should be appreciated that in order to simplify the disclosure and help to understand one or more of each inventive aspect, it is right above The present invention exemplary embodiment description in, each feature of the invention be grouped together into sometimes single embodiment, figure or In person's descriptions thereof.However, the method for the disclosure should be construed to reflect following intention：I.e. claimed hair The bright feature more features required than being expressly recited in each claim.More precisely, as the following claims As book reflects, inventive aspect is all features less than single embodiment disclosed above.Therefore, it then follows specific real Thus the claims for applying mode are expressly incorporated in the embodiment, wherein each claim is used as this hair in itself Bright separate embodiments.

Those skilled in the art should be understood the module or unit or group of the equipment in example disclosed herein Part can be arranged in equipment as depicted in this embodiment, or alternatively can be positioned at and the equipment in the example In different one or more equipment.Module in aforementioned exemplary can be combined as a module or be segmented into addition multiple Submodule.

Those skilled in the art, which are appreciated that, to be carried out adaptively to the module in the equipment in embodiment Change and they are arranged in one or more equipment different from the embodiment.Can be the module or list in embodiment Member or component be combined into a module or unit or component, and can be divided into addition multiple submodule or subelement or Sub-component.In addition at least some in such feature and/or process or unit exclude each other, it can use any Combination is disclosed to all features disclosed in this specification (including adjoint claim, summary and accompanying drawing) and so to appoint Where all processes or unit of method or equipment are combined.Unless expressly stated otherwise, this specification (including adjoint power Profit is required, summary and accompanying drawing) disclosed in each feature can or similar purpose identical, equivalent by offer alternative features come generation Replace.

Present invention additionally comprises：A8, the method as described in any of A2-7, wherein, the application structure feature also includes Using static resource, the application static resource includes the specific static state under some subdirectory in the bibliographic structure of application File is relative to the content characteristic included in the path of root and the static file；The architectural feature of the webserver is also Static resource including the webserver, the static resource of the webserver includes the static state that the webserver is provided File and the static file generate the static resource of the webserver relative to the path of the default addresses for use of the webserver Step includes：The access request to static file included according to access log obtains the static state that the webserver is provided The path of file and the static file relative to the default addresses for use of the webserver.A9, the method as described in A8, wherein it is determined that The step of whether application structure feature matches with the architectural feature of the webserver also includes：It is determined that using static resource and network Whether the static resource of server matches, including：To each path and content characteristic, Network Search service in application static resource In the static resource of device the content characteristic is included with the presence or absence of the corresponding static file in the path and the path；If each path Lookup result with content characteristic is presence, it is determined that matched using static resource with the static resource of the webserver.10、 Method as claimed in claim 9, wherein it is determined that the step whether matched with the static resource of the webserver using static resource Suddenly also include：It is non-existent path and content characteristic to lookup result, the visit to the path is sent to the webserver Request is asked, default addresses for use of the access request based on the webserver and the coordinates measurement；According to the webserver The content returned in response to access request determines whether the static resource of application static resource and the webserver matches.A11、 Method as described in any of A1-10, wherein, the step of generating an application structure feature includes：That acquisition is built in advance, Only it is populated with the access log of the webserver of the application；The mesh that the access request included according to access log is applied Tree structure is applied in directory structures, the bibliographic structure generation based on application；The visit to living document included according to access log Ask that request obtains path of the living document relative to root under some subdirectory in the bibliographic structure of application；According to visit Ask that the access request to static file that daily record is included obtains specific under some subdirectory in the bibliographic structure of application Path of the static file relative to root.A12, the method as described in A11, wherein, one application structure feature of generation Step also includes：To the multiple application structure features generated, the repetition of each child node in application tree structure is calculated respectively The multiplicity in each path in degree and application dynamic resource；To each application structure feature generated, delete and apply tree-like knot Multiplicity exceedes the child node of threshold value and exceedes the path of threshold value using multiplicity in dynamic resource in structure.In A13, such as A1-12 Method described in any one, wherein, methods described also includes step：Multiple application structure features are obtained from the storage device； To acquired each application structure feature, determining the architectural feature of the webserver of the application structure feature with being generated is No matching, if the two is matched, it is determined that be populated with the application corresponding with the application structure feature in the webserver. A14, the method as described in any of A1-13, wherein it is determined that using tree structure and the tree structure of the webserver whether The step of matching, includes：The corresponding subdirectory of a child node and the subdirectory in application tree structure are obtained relative to application Bibliographic structure in root path；It whether there is in the tree structure of Network Search server and correspond to acquired specific item Record and subdirectory includes the child node in acquired path relative to the path of the default addresses for use of the webserver；By institute The corresponding subdirectory of child node found relative to the path of the default addresses for use of the webserver remove its relative to should The path of root in bibliographic structure, to obtain in the webserver using resident catalogue relative to the webserver The path of default addresses for use；To other child nodes in application tree structure, in the corresponding subdirectory of the child node relative to application Bibliographic structure in root path after resident path of the catalogue relative to the default addresses for use of the webserver of addition application； Search whether to exist corresponding to the subdirectory and subdirectory in the tree structure of the webserver relative to the network service The path of the default addresses for use of device is equal to the child node in the path that addition is obtained；If the lookup result of each child node is to exist, Then determine the tree structure matching of application tree structure and the webserver.A15, the method as described in A14, wherein it is determined that should The static state using static resource and the webserver whether is matched and determined with dynamic resource and the dynamic resource of the webserver The step of whether resource matches also includes：Added behind the path in path and application static resource in application dynamic resource Path using resident catalogue relative to the default addresses for use of the webserver；Based on the obtained path of addition in the webserver Dynamic resource and static resource in searched or sent to the webserver access request in path obtained to addition.

Also include：17th, the equipment as described in B1, wherein, the application tree structure is with the son in the bibliographic structure applied Catalogue is child node, and the feature generation module is suitable to obtain the webserver access in the range of the scheduled time day Will；The architectural feature of the webserver is generated according to access log；The tree structure of the webserver is wherein generated, including：Root The access request included according to access log obtains the bibliographic structure of the webserver；Catalogue knot based on the webserver Structure generates the tree structure of the webserver, and the tree structure of the webserver is with the bibliographic structure of the webserver Subdirectory is child node.18th, the equipment as described in B17, wherein, the feature comparing module be adapted to determine that using tree structure and Whether the tree structure of the webserver matches, including：To each child node in application tree structure, tree structure is applied in acquisition In the corresponding subdirectory of the child node and the subdirectory relative to root in the bibliographic structure of application path；Network Search takes It is engaged in whether there is in the tree structure of device corresponding to acquired subdirectory and subdirectory lacking relative to the webserver The path of province address is equal to the child node in acquired path；If the lookup result of each child node is presence, it is determined that should Matched with tree structure and the tree structure of the webserver.B19, the equipment as described in B18, wherein, the aspect ratio is to mould Block is suitable to be non-existent child node to lookup result, is sent to the webserver to the corresponding subdirectory of the child node Access request, default addresses for use and subdirectory of the access request based on the webserver are relative in the bibliographic structure of application The coordinates measurement of root；Determine to apply tree-like knot in the content that the access request is returned according to the network server response Whether the tree structure of structure and the webserver matches.B20, the equipment as described in any of B17-19, wherein, the application Architectural feature also includes applying dynamic resource, and the application dynamic resource includes some subdirectory in the bibliographic structure of application Under path of the living document relative to root；The architectural feature of the webserver also includes the dynamic of the webserver Resource, the dynamic resource of the webserver takes including the living document that the webserver is provided relative to the network The path of the default addresses for use of business device, the feature generation module is suitable to the access to living document included according to access log Request obtains path of the living document relative to the default addresses for use of the webserver that the webserver is provided.B21, such as Equipment described in B20, wherein, the feature comparing module is adapted to determine that the dynamic resource using dynamic resource and the webserver Whether match, including：To each path in application dynamic resource, the road is whether there is in the dynamic resource of Network Search server Footpath；If the lookup result in each path is presence, it is determined that matched using dynamic resource with the dynamic resource of the webserver. B22, the equipment as described in B21, wherein, the feature comparing module is suitable to be non-existent path to lookup result, to described The webserver sends the access request to the path, default addresses for use of the access request based on the webserver and the road Footpath is generated；Determine to apply dynamic resource and network service in the content that access request is returned according to the network server response Whether the dynamic resource of device matches.B23, the equipment as described in any of B17-22, wherein, the application structure feature is also wrapped Include and apply static resource, the application static resource includes specific quiet under some subdirectory in the bibliographic structure of application State file is relative to the content characteristic included in the path of root and the static file；The structure of the webserver is special Levying also includes the static resource of the webserver, and the static resource of the webserver includes what the webserver was provided Static file and the static file are relative to the path of the default addresses for use of the webserver, and the feature generation module is suitable for root According to being obtained to the access request of static file of being included of the access log static file that the webserver provides and this is quiet Path of the state file relative to the default addresses for use of the webserver.B24, the equipment as described in B23, wherein, the aspect ratio pair Module, which is adapted to determine that, applies whether static resource matches with the static resource of the webserver, including：To in application static resource It whether there is the path in each path and content characteristic, the static resource of Network Search server and the path be corresponding quiet State file includes the content characteristic；If the lookup result of each path and content characteristic is presence, it is determined that the static money of application Source is matched with the static resource of the webserver.B25, the equipment as described in B24, wherein, the feature comparing module be suitable to pair Lookup result is non-existent path and content characteristic, and the access request to the path, the visit are sent to the webserver Ask default addresses for use and the coordinates measurement of the request based on the webserver；Please in access according to the network server response The content asked and returned determines whether the static resource of application static resource and the webserver matches.Appoint in B26, such as B16-25 Equipment described in one, wherein, the storage device is suitable to obtain the build in advance, webserver being only populated with the application Access log；The bibliographic structure that the access request included according to access log is applied, the bibliographic structure based on application Tree structure is applied in generation；The access request to living document included according to access log obtains the catalogue knot positioned at application Path of the living document relative to root under the subdirectory of some in structure；According to access log included to static file Access request obtains road of the specific static file relative to root under some subdirectory in the bibliographic structure of application Footpath.B27, the equipment as described in B26, wherein, the storage device is suitable to multiple application structure features to being generated, and counts respectively Calculate the multiplicity of each child node and the multiplicity using each path in dynamic resource in application tree structure；To what is generated Each application structure feature, deletes multiplicity in application tree structure and exceedes the child node of threshold value and repeated using in dynamic resource Path of the degree more than threshold value.B28, the equipment as described in any of B16-27, wherein, the feature acquisition module is suitable to from institute State storage device and obtain multiple application structure features；The feature comparing module is suitable to special to acquired each application structure Levy, determine whether the application structure feature and the architectural feature of the webserver generated match, if the two is matched, it is determined that The application corresponding with the application structure feature is populated with the webserver.B29, as described in any of B16-28 Equipment, wherein, the feature comparing module is suitable to the corresponding subdirectory of a child node obtained in application tree structure and should Path of the subdirectory relative to root in the bibliographic structure of application；In the tree structure of Network Search server with the presence or absence of pair The path of the default addresses for use of subdirectory and subdirectory relative to the webserver acquired in Ying Yu includes acquired road The child node in footpath；Path by the corresponding subdirectory of the child node found relative to the default addresses for use of the webserver The path of root in its bibliographic structure relative to application is removed, it is relative using the catalogue being resident in the webserver to obtain In the path of the default addresses for use of the webserver；To other child nodes in application tree structure, in the corresponding son of the child node The catalogue catalogue resident relative to addition application behind the path of root in the bibliographic structure of application is relative to the webserver The path of default addresses for use；Search whether exist corresponding to the subdirectory and specific item picture recording in the tree structure of the webserver It is equal to the child node in the path that addition is obtained for the path of the default addresses for use of the webserver；If each child node is looked into It is presence to look for result, it is determined that application tree structure and the matching of the tree structure of the webserver.B30, setting as described in B29 It is standby, wherein, the feature comparing module adds after being suitable to the path in the path in application dynamic resource and application static resource Plus resident path of the catalogue relative to the default addresses for use of the webserver of application；Based on the obtained path of addition in network service The access searched in the dynamic resource and static resource of device or send the path obtained to addition to the webserver please Ask.

Although in addition, it will be appreciated by those of skill in the art that some embodiments described herein include other embodiments In included some features rather than further feature, but the combination of the feature of be the same as Example does not mean in of the invention Within the scope of and form different embodiments.For example, in the following claims, times of embodiment claimed One of meaning mode can be used in any combination.

In addition, be described as herein can be by the processor of computer system or by performing for some in the embodiment Method or the combination of method element that other devices of the function are implemented.Therefore, with for implementing methods described or method The processor of the necessary instruction of element forms the device for implementing this method or method element.In addition, device embodiment Element described in this is the example of following device：The device is used to implement as in order to performed by implementing the element of the purpose of the invention Function.

As used in this, unless specifically stated so, come using ordinal number " first ", " second ", " the 3rd " etc. Description plain objects are merely representative of the different instances for being related to similar object, and are not intended to imply that the object being so described must Must have the time it is upper, spatially, in terms of sequence or given order in any other manner.

Although describing the present invention according to the embodiment of limited quantity, above description, the art are benefited from It is interior it is clear for the skilled person that in the scope of the present invention thus described, it can be envisaged that other embodiments.Additionally, it should be noted that The language that is used in this specification primarily to readable and teaching purpose and select, rather than in order to explain or limit Determine subject of the present invention and select.Therefore, in the case of without departing from the scope and spirit of the appended claims, for this Many modifications and changes will be apparent from for the those of ordinary skill of technical field.For the scope of the present invention, to this The done disclosure of invention is illustrative and not restrictive, and it is intended that the scope of the present invention be defined by the claims appended hereto.

Claims

1. a kind of method for recognizing the application being resident in the webserver, suitable for being performed in computing device, the computing device The storage device at least one application structure feature that is stored with is couple to, each application structure feature corresponds to an application, institute Stating method includes step：

Application structure feature is obtained from the storage device, the application structure feature includes applying tree structure, the application Bibliographic structure generation of the tree structure based on the application；

The architectural feature of the webserver is generated, the architectural feature of the webserver includes the tree-like of the webserver Structure, bibliographic structure generation of the tree structure based on the webserver of the webserver；And

It is determined that whether acquired application structure feature matches with the architectural feature of the webserver, if the two is matched, Determine to be populated with the application corresponding with the application structure feature in the webserver.

2. the method for claim 1, wherein the application tree structure using the subdirectory in the bibliographic structure applied as The step of child node, architectural feature for generating the webserver, includes：

Obtain access log of the webserver in the range of the scheduled time；

The architectural feature of the webserver is generated according to access log；Wherein

The tree structure of the webserver is generated, including：

The access request included according to access log obtains the bibliographic structure of the webserver；

Bibliographic structure based on the webserver generates the tree structure of the webserver, the tree structure of the webserver Using the subdirectory in the bibliographic structure of the webserver as child node.

3. method as claimed in claim 2, wherein it is determined that application structure feature and the architectural feature of the webserver whether With the step of include：

It is determined that whether matched using tree structure and the tree structure of the webserver, including：

To each child node in application tree structure,

Obtain using the corresponding subdirectory of the child node in tree structure and the subdirectory relative to root in the bibliographic structure of application The path of catalogue；

It whether there is in the tree structure of Network Search server and correspond to acquired subdirectory and subdirectory relative to described The path of the default addresses for use of the webserver is equal to the child node in acquired path；

If the lookup result of each child node is presence, it is determined that application tree structure and the tree structure of the webserver Match somebody with somebody.

4. method as claimed in claim 3, wherein it is determined that application structure feature and the architectural feature of the webserver whether With the step of also include：

It is non-existent child node to lookup result, the visit to the corresponding subdirectory of the child node is sent to the webserver Request is asked, default addresses for use and subdirectory of the access request based on the webserver are relative to root in the bibliographic structure of application The coordinates measurement of catalogue；

Determine to apply tree structure and the webserver in the content that access request is returned according to the network server response Tree structure whether match.

5. the method as described in any of claim 2-4, wherein, the application structure feature also includes application dynamic money Source, the application dynamic resource is including the living document under some subdirectory in the bibliographic structure of application relative to root Path；

The architectural feature of the webserver also includes the dynamic resource of the webserver, the dynamic money of the webserver Source includes the path for default addresses for use of the living document relative to the webserver that the webserver is provided,

The step of dynamic resource for generating the webserver, includes：

The access request to living document included according to access log obtains the living document that the webserver is provided Relative to the path of the default addresses for use of the webserver.

6. method as claimed in claim 5, wherein it is determined that application structure feature and the architectural feature of the webserver whether With the step of also include：

It is determined that whether matched with the dynamic resource of the webserver using dynamic resource, including：

To each path in application dynamic resource, the path is whether there is in the dynamic resource of Network Search server；

If the lookup result in each path is presence, it is determined that the dynamic resource of application dynamic resource and the webserver Match somebody with somebody.

7. method as claimed in claim 6, wherein it is determined that using dynamic resource and the webserver dynamic resource whether With the step of also include：

It is non-existent path to lookup result, the access request to the path is sent to the webserver, the access please Ask default addresses for use and the coordinates measurement based on the webserver；

Determine to apply dynamic resource and the webserver in the content that access request is returned according to the network server response Dynamic resource whether match.

8. a kind of equipment for recognizing the application being resident in the webserver, the equipment is couple at least one application knot that is stored with The storage device of structure feature, each application structure feature corresponds to an application, and the equipment includes：

Feature acquisition module, suitable for obtaining application structure feature from the storage device, the application structure feature includes application Tree structure, bibliographic structure generation of the application tree structure based on the application；

Feature generation module, the architectural feature suitable for generating the webserver, the architectural feature bag of the webserver Include the tree structure of the webserver, bibliographic structure life of the tree structure based on the webserver of the webserver Into；And

Feature comparing module, be adapted to determine that acquired application structure feature and the webserver architectural feature whether Match somebody with somebody, if the two is matched, it is determined that be populated with the application corresponding with the application structure feature in the webserver.

9. a kind of computing device, including：

One or more processors；

Memory；And

One or more programs, wherein one or more of program storages are in the memory and are configured as by described one Individual or multiple computing devices, one or more of programs include being used to perform in the method according to claim 1-7 Either method instruction.

10. a kind of computer-readable recording medium for storing one or more programs, one or more of programs include instruction, The instruction is when executed by a computing apparatus so that in method of the computing device according to claim 1-7 Either method.