CN107547502B - Information monitoring system, method and device, electronic equipment and storage medium - Google Patents
Information monitoring system, method and device, electronic equipment and storage medium Download PDFInfo
- Publication number
- CN107547502B CN107547502B CN201710423034.5A CN201710423034A CN107547502B CN 107547502 B CN107547502 B CN 107547502B CN 201710423034 A CN201710423034 A CN 201710423034A CN 107547502 B CN107547502 B CN 107547502B
- Authority
- CN
- China
- Prior art keywords
- monitoring
- client
- information
- webpage
- daemon
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Abstract
The embodiment of the application provides an information monitoring system, a method and a device, which relate to the technical field of internet, wherein the system comprises: monitoring a client and a server; the monitoring client is used for monitoring whether a monitoring object in the electronic equipment where the monitoring client is located has webpage access operation, if so, capturing webpage information of a webpage accessed by the monitoring object, and sending the webpage information to the server; the server is used for receiving the webpage information sent by the monitoring client, analyzing the webpage information by combining with a preset webpage classification database, and monitoring whether the webpage accessed by the monitored object is a webpage allowed to be accessed. By applying the technical scheme provided by the embodiment of the application, the information monitoring is realized, and the cost for monitoring the webpage access operation can be reduced.
Description
Technical Field
The present application relates to the field of internet technologies, and in particular, to an information monitoring system, method, and apparatus.
Background
With the rapid development of the internet, the number of websites in the internet is becoming larger, and the types of web pages provided by the websites are news, sports, shopping and the like. For the workers in the enterprises or organizations, the various types of web pages are some related to work and some are unrelated to work, so that most enterprises or organizations monitor the web pages visited by the workers to process the web pages in time when the workers visit the web pages unrelated to work.
In the prior art, a box-type device in a hardware form is usually deployed to monitor a webpage accessed by a worker, that is, a device used by the worker accesses the internet through the box-type device, so that the box-type device monitors whether the webpage accessed by the worker is a webpage related to work.
Although the method can be used for monitoring the webpage accessed by the staff, the hardware-form box-type equipment relates to various links such as production, transportation and the like, and each link has higher cost, so that the cost is higher when an enterprise or an organization monitors the webpage accessed by the staff.
Disclosure of Invention
An object of the embodiments of the present application is to provide an information monitoring system, method and apparatus, so as to reduce the cost of monitoring a web page access operation. The specific technical scheme is as follows:
in order to achieve the above object, an embodiment of the present application discloses an information monitoring system, where the system includes: monitoring a client and a server; wherein the content of the first and second substances,
the monitoring client is used for monitoring whether a monitoring object in the electronic equipment where the monitoring client is located has webpage access operation, if so, capturing webpage information of a webpage accessed by the monitoring object, and sending the webpage information to the server;
and the server is used for receiving the webpage information sent by the monitoring client, analyzing the webpage information and monitoring whether the webpage accessed by the monitored object is the webpage allowed to be accessed according to the analysis result.
In order to achieve the above object, an embodiment of the present application discloses an information monitoring method, which is applied to a monitoring client in an information monitoring system, wherein the information monitoring system includes: monitoring a client and a server, wherein the method comprises the following steps:
monitoring whether a webpage access operation exists in a monitoring object in the electronic equipment where the monitoring client side is located;
if yes, capturing webpage information of a webpage accessed by the monitoring object;
and sending the webpage information to the server so that the server analyzes the webpage information and monitors whether the webpage accessed by the monitoring object is a webpage allowed to be accessed according to an analysis result.
In order to achieve the above object, an embodiment of the present application discloses an information monitoring apparatus, which is applied to a monitoring client in an information monitoring system, wherein the information monitoring system includes: monitor client and server, the device includes: the system comprises an access monitoring module, an information capturing module and an information sending module; wherein the content of the first and second substances,
the access monitoring module is used for monitoring whether a webpage access operation exists in a monitored object in the electronic equipment where the monitoring client side is located, and if the webpage access operation exists in the monitored object, the information capturing module is triggered;
the information capturing module is used for capturing webpage information of a webpage accessed by the monitoring object;
the information sending module is used for sending the webpage information to the server so that the server analyzes the webpage information by combining with a preset webpage classification database and monitors whether the webpage accessed by the monitored object is a webpage allowed to be accessed or not.
In order to achieve the above object, an embodiment of the present application discloses an electronic device, where the electronic device is a device installed with a client in an information monitoring system, and the information monitoring system includes: the monitoring client and the server, the electronic device includes: a processor and a machine-readable storage medium storing machine-executable instructions executable by the processor, the processor being caused by the machine-executable instructions to: the information monitoring method provided by the embodiment of the application is realized.
In order to achieve the above object, an embodiment of the present application discloses a machine-readable storage medium, where the machine-readable storage medium is: install the storage medium of the electronic equipment who listens to the customer end in the information monitoring system, wherein, the information monitoring system includes: the listening client and server, the machine-readable storage medium storing machine-executable instructions that, when invoked and executed by a processor, cause the processor to: the information monitoring method provided by the embodiment of the application is realized.
According to the scheme provided by the embodiment of the application, when the monitoring client monitors that the monitoring object in the electronic equipment where the monitoring client is located has webpage access operation, the monitoring client captures webpage information of a webpage accessed by the monitoring object and sends the captured webpage information to the server, after the server receives the webpage information, the server analyzes the webpage information by combining preset webpage classification data, and monitors whether the webpage accessed by the monitoring object is a webpage allowed to be accessed according to an analysis result. According to the scheme provided by the embodiment of the application, the monitoring of the monitored object is realized in a mode of installing the monitoring client in the electronic equipment, the mode of monitoring the webpage access operation by adopting software belongs to a mode of monitoring the webpage access operation by adopting software, and the cost of a production link of the software is low compared with that of a production link of hardware, and the software almost has no transportation cost, so that the cost of monitoring the webpage access operation can be greatly reduced by integrating the scheme provided by the embodiment of the application to realize information monitoring.
Drawings
In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the following description are only some embodiments of the present application, and for those skilled in the art, other drawings can be obtained according to the drawings without creative efforts.
Fig. 1 is a schematic structural diagram of an information monitoring system according to an embodiment of the present application;
fig. 2 is a schematic structural diagram of another information monitoring system according to an embodiment of the present application;
fig. 3 is a schematic flowchart of an information monitoring method according to an embodiment of the present application;
fig. 4 is a schematic structural diagram of an information monitoring apparatus according to an embodiment of the present application.
Detailed Description
The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are only a part of the embodiments of the present application, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.
Fig. 1 is a schematic structural diagram of an information monitoring system according to an embodiment of the present application, where the system includes: monitoring a client 101 and a server 102; wherein the content of the first and second substances,
the monitoring client 101 is configured to monitor whether a webpage access operation exists in a monitoring object in the electronic device where the monitoring client 101 is located, and if the webpage access operation exists, capture webpage information of a webpage accessed by the monitoring object, and send the webpage information to the server 102;
and the server 102 is configured to receive the webpage information sent by the monitoring client 101, analyze the webpage information, and monitor whether the webpage accessed by the monitoring object is a webpage allowed to be accessed according to an analysis result.
Specifically, the above listening client 101 and the listening object are installed in the same electronic device, and the listening object may be understood as: and a client having a web page access function, for example, a browser.
The monitoring client 101 may be a plug-in of the monitoring object, a functional module of the monitoring object itself, or a client independent from the monitoring object, which is not limited in this application.
For example, when the monitoring object is a browser, the monitoring client 101 may be a plug-in of the browser, and the plug-in monitors a webpage accessed by the browser; the listening client 101 may also be a client independent from the browser, i.e. different from the browser.
As can be seen from the foregoing description, the above monitoring client 101 is used for monitoring the condition that the monitored object accesses the web page, in order to enable the monitoring client 101 to comprehensively monitor the web page accessed by the monitored object,
in one implementation, when the monitoring client 101 is a plug-in or a function module of the monitoring object, switching of the monitoring object from a non-operating state to an operating state may trigger switching of the monitoring client 101 from the non-operating state to the operating state, and correspondingly, switching of the monitoring object from the operating state to the non-operating state may also trigger switching of the monitoring client 101 from the operating state to the non-operating state, for example, after a browser is started, triggering of the monitoring client 101 as a browser plug-in or a function module is started, and then the plug-in or the function module may start monitoring an operation of the browser for accessing a web page from the browser after the browser is started, and in addition, after the browser is closed, triggering of the plug-in or the function module to be closed accordingly;
in another implementation manner, when the monitoring client 101 is a client independent from the monitoring object, the monitoring client 101 may monitor whether the monitoring object is switched from a non-operating state to an operating state, and if so, the monitoring client 101 also enters the operating state, so as to monitor a webpage accessed by the monitoring object, and correspondingly, if the monitoring client 101 monitors that the monitoring object is switched from the operating state to the non-operating state, the monitoring client 101 also enters the non-operating state.
Specifically, the web page information may include at least one of the following information:
monitoring a website domain name of a webpage accessed by an object;
monitoring a complete website of a webpage accessed by an object;
monitoring the time of the object accessing the webpage;
and monitoring the local IP address of the object.
In the present application, the above is merely used as an example, and the web page information is not limited to the above information.
In one implementation, the server 102 analyzes the web page information, and when monitoring whether the web page accessed by the monitoring object is the web page allowed to be accessed according to the analysis result, the web page information may be analyzed by combining a preset web page classification database, specifically, the web page information is compared with data recorded in the web page classification database, a classification to which the web page accessed by the monitoring object belongs is determined, and then whether the determined classification is the classification allowed to be accessed is determined, if the classification is allowed to be accessed, the web page accessed by the monitoring object may be considered as the web page allowed to be accessed, otherwise, if the classification is not allowed to be accessed, the web page accessed by the monitoring object may be considered as not the web page allowed to be accessed.
In an optional implementation manner, the web page classification database may be: the present application is not limited to a URL (Uniform Resource Locator) based web page classification database.
Specifically, in one case, the web page classification database may be a web page classification database in a manufacturer cloud server corresponding to the monitoring client 101, in this case, when the server 102 analyzes the web page information, an analysis request may be sent to the manufacturer cloud server, where the analysis request includes the web page information, the manufacturer cloud server analyzes the classification of the web page corresponding to the web page information by using the locally stored web page classification database, and feeds back an analysis result to the server 102, and then the server 102 monitors whether the web page accessed by the monitoring object is a web page allowed to be accessed according to the analysis result.
Alternatively, the web page classification database may be a web page classification database in a manufacturer cloud server corresponding to the monitoring client 101 and a web page classification database in a user server corresponding to the monitoring client 101, in which case, the server 102 analyzes the web page information, the web page information can be analyzed by the web page classification database in the user server to determine the classification of the web pages accessed by the monitored object, if the classification of the web pages accessed by the monitored object can not be determined by the analysis, since the information in the web page classification database in the factory cloud server is usually rich, the web page information is analyzed by the classification database in the manufacturer cloud server, and the server 102 monitors whether the webpage accessed by the monitoring object is the webpage allowed to be accessed according to the analysis result. Because the user server can have higher analysis efficiency under the condition, the information of the webpage does not need to be sent to the manufacturer cloud server for analysis every time, and the pressure of the manufacturer server can be greatly relieved.
The server 102 and the user server may correspond to one hardware entity or different hardware entities, which is not limited in this application.
In an implementation manner of the present application, the server 102 may be further configured to generate a monitoring report according to a monitoring result of whether the webpage accessed by the monitoring object is the webpage allowed to be accessed, so that a manager can conveniently know the condition of the webpage accessed by the monitoring object by looking up the monitoring report.
Specifically, when the server 102 generates the monitoring report, the monitoring report may be generated at regular time, or the monitoring report may be generated immediately after the monitoring result is obtained, which is not limited in this application.
The monitoring report may include information such as classification of web pages accessed by the monitoring object.
As can be seen from the above, in the scheme provided in this embodiment, when the monitoring client monitors that the monitoring object in the electronic device where the monitoring client is located has a web access operation, the monitoring client captures web information of a web accessed by the monitoring object and sends the captured web information to the server, and after receiving the web information, the server analyzes the web information in combination with preset web classification data, and monitors whether the web accessed by the monitoring object is a web allowed to be accessed according to an analysis result. Because the monitoring of the monitored object is realized by installing the monitoring client in the electronic equipment in the scheme provided by the embodiment, the method belongs to a mode of monitoring the webpage access operation by adopting software, and because the production link of the software is low in cost compared with the production link of hardware and the software has almost no transportation cost, the cost for monitoring the webpage access operation can be greatly reduced by integrating the scheme provided by the embodiment.
As can be understood by those skilled in the art, after the monitoring client 101 is installed in the electronic device, there may be a case where the monitoring client 101 is maliciously uninstalled or the monitoring function of the monitoring client 101 is maliciously closed, which may easily cause that the monitoring client 101 cannot effectively monitor the monitored object. Based on the above situation, in an implementation manner, referring to fig. 2, a schematic structural diagram of another information monitoring system is provided, and compared with the information monitoring system shown in fig. 1, the information monitoring system provided in this embodiment further includes: the method comprises the following steps that a daemon client 103 is installed in the same electronic device as a monitoring client 101;
the monitoring client 101 is further configured to establish a communication connection with the daemon client 103;
the daemon client 103 is further configured to establish a communication connection with the monitoring client 101, monitor whether the monitoring client 101 is in an operating state when the monitoring object is in the operating state, and process a situation that the monitoring client 101 is in the non-operating state according to a preset processing mode if the monitoring client 101 is in the non-operating state.
When the monitoring object is in the running state, the monitoring client 101 is in the running state to monitor the web page accessed by the monitoring object, and therefore, in the scheme provided by this embodiment, the daemon client 103 monitors the running state of the monitoring client 101 when determining that the monitoring object is in the running state. When the daemon client 103 considers that the monitoring client 101 is in a non-running state, the monitoring client 101 may have a risk of being maliciously unloaded or the monitoring function being maliciously turned off, and therefore, the corresponding processing needs to be performed on the situation to ensure that monitoring on the monitored object is continuously and effectively achieved.
Specifically, when the daemon client 103 processes the condition that the monitoring client 101 is in the non-running state according to a preset processing mode, the following conditions may be included:
in the first case: if the daemon client 103 determines that the monitoring function of the monitoring client 101 is turned off, the monitoring function of the monitoring client 101 may be turned on again;
in the second case: if the daemon client 103 determines that the monitoring client 101 is uninstalled, the monitoring client 101 may be reinstalled;
in the third case: the daemon client 103 may send alarm information to the server 102 to monitor that the client 101 is in a non-operating state; the server 102 receives the alarm information sent by the daemon client 103. Thus, the manager can learn the alarm information from the server 102 and handle the situation that the listening client 101 is in the non-operating state.
When the monitoring client 101 establishes a communication connection with the daemon client 103, the following two ways can be implemented:
in the first mode, after the monitoring client 101 is switched from the non-operating state to the operating state, a connection establishment request may be sent to the daemon client 103, and after the daemon client 103 receives the connection establishment request, the daemon client 103 establishes a communication connection between the daemon client 103 and the monitoring client 101, and notifies the monitoring client 101 that the communication connection establishment is successful.
In a second manner, the daemon client 103 may further send a connection establishment request to the monitoring client 101 after monitoring that the monitoring client 101 is switched from the non-running state to the running state, and the monitoring client 101 establishes a communication connection between the daemon client 103 and the monitoring client 101.
In an optional implementation manner, the monitoring client 101 may further send a heartbeat message to the daemon client 103 according to a preset time interval after establishing a communication connection with the daemon client 103; in this way, when the monitoring client 103 monitors whether the monitoring client 101 is in the running state under the condition that the monitoring object is in the running state, the monitoring can be implemented by monitoring the heartbeat message, specifically, whether the heartbeat message sent by the monitoring client 101 meets the preset monitoring condition is monitored, and if so, the monitoring client 101 is determined to be in the running state.
The above monitoring condition may be a time interval between a current time and a time when the heartbeat packet is received last time, and for convenience of description, the time interval is denoted as: if the target time interval is greater than the preset threshold, it may be determined that the listening client 101 is not in an operating state, that is, a non-operating state.
The target time interval may or may not be related to the preset time interval. Specifically, the target time interval may be: the preset time interval is an integral multiple of the preset time interval, for example, the preset time interval may be 60 seconds, the target time interval may be 60 seconds by 3 seconds or 180 seconds, and so on.
In order to ensure that the daemon client 103 can accurately grasp the operation condition of the monitoring client 101, the daemon client 103 may specifically monitor whether the monitoring object is switched from a non-operation state to an operation state, and if so, start monitoring whether the monitoring client 101 is in the operation state.
Additionally, the daemon client 103 may be started with the start of the electronic device.
Since the daemon client 103 also has a risk of being maliciously uninstalled, in an implementation manner of the present application, the daemon client 103 may be an uninstalled client.
As can be seen from the above, in the solutions provided in the above embodiments, when the monitoring object is in the running state, the daemon client monitors whether the monitoring client is in the running state, so that whether the monitoring client is maliciously unloaded or whether the monitoring function is maliciously closed can be effectively ensured, and further, the monitoring client can effectively ensure that the monitoring client can efficiently monitor the webpage accessed by the monitoring object.
Corresponding to the information monitoring system, the embodiment of the application also provides an information monitoring method.
Fig. 3 is a schematic flowchart of an information monitoring method according to an embodiment of the present application, where the method is applied to a monitoring client in an information monitoring system, where the information monitoring system includes: and monitoring the client and the server.
Specifically, the information monitoring method includes:
s301: and monitoring whether a webpage access operation exists in a monitoring object in the electronic equipment where the monitoring client side is located, and if so, executing S302.
Specifically, the listening client and the listening object are installed in the same electronic device, and the listening object may be understood as: and a client having a web page access function, for example, a browser.
The monitoring client may be a plug-in of the monitoring object, a functional module of the monitoring object itself, or a client independent from the monitoring object, which is not limited in this application.
S302: and capturing webpage information of the webpage accessed by the monitoring object.
Specifically, the web page information may include at least one of the following information:
monitoring a website domain name of a webpage accessed by an object;
monitoring a complete website of a webpage accessed by an object;
monitoring the time of the object accessing the webpage;
and monitoring the local IP address of the object.
In the present application, the above is merely used as an example, and the web page information is not limited to the above information.
S303: and sending the webpage information to a server so that the server analyzes the webpage information and monitors whether the webpage accessed by the monitoring object is a webpage allowed to be accessed according to an analysis result.
In one implementation manner, the information monitoring system further includes: the system comprises a daemon client, a monitoring client and a monitoring server, wherein the daemon client and the monitoring client are installed in the same electronic equipment; the information monitoring method further comprises the following steps:
establishing communication connection with a daemon client;
and sending heartbeat messages to the daemon client according to a preset time interval, so that the daemon client judges whether the monitoring client is in a running state or not by monitoring the heartbeat messages.
It should be noted that, the detailed contents related to each step of the information monitoring method provided in each embodiment are the same as those related to the information monitoring system, and are not described again here.
As can be seen from the above, in the solutions provided in the embodiments, when the monitoring client monitors that the monitoring object in the electronic device where the monitoring client is located has a web access operation, the monitoring client captures web information of a web accessed by the monitoring object and sends the captured web information to the server, and after receiving the web information, the server analyzes the web information in combination with preset web classification data, and monitors whether the web accessed by the monitoring object is a web allowed to be accessed according to an analysis result. In the solutions provided by the above embodiments, the monitoring of the monitored object is realized by installing the monitoring client in the electronic device, which belongs to a method of monitoring the web access operation by using software, and the production link of the software is lower in cost compared with the production link of hardware, and the software has almost no transportation cost, so that the cost of monitoring the web access operation can be greatly reduced by integrating the solutions provided by the above embodiments to realize information monitoring.
Corresponding to the information monitoring method, the embodiment of the application also provides an information monitoring device.
Fig. 4 is a schematic structural diagram of an information monitoring apparatus according to an embodiment of the present application, where the apparatus is applied to a monitoring client in an information monitoring system, where the information monitoring system includes: and monitoring the client and the server.
Specifically, the information monitoring apparatus includes: an access monitoring module 401, an information capturing module 402 and an information sending module 403; wherein the content of the first and second substances,
the access monitoring module 401 is configured to monitor whether a webpage access operation exists in a monitored object in the electronic device where the monitoring client is located, and if the webpage access operation exists, trigger the information capturing module 402;
the information capturing module 403 is configured to capture webpage information of a webpage accessed by the monitoring object;
the information sending module is used for sending the webpage information to the server so that the server analyzes the webpage information and monitors whether the webpage accessed by the monitored object is a webpage allowed to be accessed or not.
Specifically, the information monitoring system further includes: the system comprises a daemon client, a monitoring client and a monitoring server, wherein the daemon client and the monitoring client are installed in the same electronic equipment; the device further comprises:
the connection establishing module is used for establishing communication connection with the daemon client;
the message sending module is used for sending heartbeat messages to the daemon client according to a preset time interval, so that the daemon client can judge whether the monitoring client is in an operating state or not by monitoring the heartbeat messages.
As can be seen from the above, in the solutions provided in the embodiments, when the monitoring client monitors that the monitoring object in the electronic device where the monitoring client is located has a web access operation, the monitoring client captures web information of a web accessed by the monitoring object and sends the captured web information to the server, and after receiving the web information, the server analyzes the web information in combination with preset web classification data, and monitors whether the web accessed by the monitoring object is a web allowed to be accessed according to an analysis result. In the solutions provided by the above embodiments, the monitoring of the monitored object is realized by installing the monitoring client in the electronic device, which belongs to a method of monitoring the web access operation by using software, and the production link of the software is lower in cost compared with the production link of hardware, and the software has almost no transportation cost, so that the cost of monitoring the web access operation can be greatly reduced by integrating the solutions provided by the above embodiments to realize information monitoring.
The embodiment of the present application further provides an electronic device, where the electronic device is a device installed with a client in an information monitoring system, and the information monitoring system includes: the monitoring client and the server, the electronic device includes: a processor and a machine-readable storage medium storing machine-executable instructions executable by the processor, the processor being caused by the machine-executable instructions to: the information monitoring method is achieved.
Specifically, the information monitoring method includes:
monitoring whether a webpage access operation exists in a monitoring object in the electronic equipment where the monitoring client side is located;
if yes, capturing webpage information of a webpage accessed by the monitoring object;
and sending the webpage information to the server so that the server analyzes the webpage information and monitors whether the webpage accessed by the monitoring object is a webpage allowed to be accessed according to an analysis result.
The machine-readable storage medium may include a Random Access Memory (RAM) and a Non-Volatile Memory (NVM), such as at least one disk Memory. Optionally, the memory may also be at least one memory device located remotely from the processor.
The Processor may be a general-purpose Processor, including a Central Processing Unit (CPU), a Network Processor (NP), and the like; but also Digital Signal Processors (DSPs), Application Specific Integrated Circuits (ASICs), Field Programmable Gate Arrays (FPGAs) or other Programmable logic devices, discrete Gate or transistor logic devices, discrete hardware components.
As can be seen from the above, in the scheme provided in this embodiment, when the monitoring client installed in the electronic device monitors that the monitoring object in the electronic device has a web access operation, the monitoring client captures web information of a web accessed by the monitoring object and sends the captured web information to the server, and after receiving the web information, the server analyzes the web information in combination with preset web classification data, and monitors whether the web accessed by the monitoring object is a web allowed to be accessed according to an analysis result. Because the monitoring of the monitored object is realized by installing the monitoring client in the electronic equipment in the scheme provided by the embodiment, the method belongs to a mode of monitoring the webpage access operation by adopting software, and because the production link of the software is low in cost compared with the production link of hardware and the software has almost no transportation cost, the cost for monitoring the webpage access operation can be greatly reduced by integrating the scheme provided by the embodiment.
An embodiment of the present application further provides a machine-readable storage medium, where the machine-readable storage medium is: install the storage medium of the electronic equipment who listens to the customer end in the information monitoring system, wherein, the information monitoring system includes: the listening client and server, the machine-readable storage medium storing machine-executable instructions that, when invoked and executed by a processor, cause the processor to: the information monitoring method provided by the embodiment of the application is realized.
Specifically, the information monitoring method includes:
monitoring whether a webpage access operation exists in a monitoring object in the electronic equipment where the monitoring client side is located;
if yes, capturing webpage information of a webpage accessed by the monitoring object;
and sending the webpage information to the server so that the server analyzes the webpage information and monitors whether the webpage accessed by the monitoring object is a webpage allowed to be accessed according to an analysis result.
As can be seen from the above, in the solution provided in this embodiment, when a processor of the electronic device calls and executes a machine executable instruction stored in a machine readable storage medium of the electronic device, when a monitoring client installed in the electronic device monitors that a monitored object in the electronic device has a web access operation, the monitoring client captures web information of a web accessed by the monitored object and sends the captured web information to a server, and after receiving the web information, the server analyzes the web information in combination with preset web classification data, and monitors whether the web accessed by the monitored object is a web allowed to be accessed according to an analysis result. Because the monitoring of the monitored object is realized by installing the monitoring client in the electronic equipment in the scheme provided by the embodiment, the method belongs to a mode of monitoring the webpage access operation by adopting software, and because the production link of the software is low in cost compared with the production link of hardware and the software has almost no transportation cost, the cost for monitoring the webpage access operation can be greatly reduced by integrating the scheme provided by the embodiment.
It is noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.
All the embodiments in the present specification are described in a related manner, and the same and similar parts among the embodiments may be referred to each other, and each embodiment focuses on the differences from the other embodiments. In particular, as for the method, apparatus, electronic device, and machine-readable storage medium embodiments, since they are substantially similar to the system embodiments, the description is simple, and reference may be made to some descriptions of the system embodiments for relevant points.
The above description is only for the preferred embodiment of the present application, and is not intended to limit the scope of the present application. Any modification, equivalent replacement, improvement and the like made within the spirit and principle of the present application are included in the protection scope of the present application.
Claims (9)
1. An information listening system, the system comprising: monitoring a client, a server and a daemon client; the daemon client and the monitoring client are installed in the same electronic equipment;
the monitoring client is used for monitoring whether a monitoring object in the electronic equipment where the monitoring client is located has webpage access operation, if so, capturing webpage information of a webpage accessed by the monitoring object, and sending the webpage information to the server;
the server is used for receiving the webpage information sent by the monitoring client, analyzing the webpage information and monitoring whether the webpage accessed by the monitored object is a webpage allowed to be accessed or not according to the analysis result;
the monitoring client is also used for establishing communication connection with the daemon client;
the daemon client is further used for establishing communication connection with the monitoring client, monitoring whether the monitoring client is in an operating state when the monitored object is in the operating state, and if the monitoring client is in a non-operating state, processing the condition that the monitoring client is in the non-operating state according to a preset processing mode.
2. The system of claim 1,
the monitoring client is further used for sending heartbeat messages to the daemon client according to a preset time interval after the communication connection is established with the daemon client;
the daemon client is specifically configured to monitor whether a heartbeat message sent by the monitoring client meets a preset monitoring condition, and if so, determine that the monitoring client is in an operating state.
3. The system of claim 1,
the daemon client is specifically used for sending alarm information of the monitoring client in a non-running state to the server;
and the server is used for receiving the alarm information sent by the daemon client.
4. The system of claim 1,
the daemon client is specifically configured to monitor whether the monitoring object is switched from a non-operating state to an operating state, and if so, start monitoring whether the monitoring client is in the operating state.
5. The system according to any one of claims 1-4,
the server is also used for generating a monitoring report according to the monitoring result of whether the webpage accessed by the monitoring object is the webpage allowed to be accessed.
6. An information monitoring method is applied to a monitoring client in an information monitoring system, wherein the information monitoring system comprises: the system comprises a monitoring client, a server and a daemon client, wherein the daemon client and the monitoring client are installed in the same electronic equipment; the method comprises the following steps:
monitoring whether a webpage access operation exists in a monitoring object in the electronic equipment where the monitoring client side is located;
if yes, capturing webpage information of a webpage accessed by the monitoring object;
sending the webpage information to the server so that the server analyzes the webpage information and monitors whether the webpage accessed by the monitoring object is a webpage allowed to be accessed or not according to an analysis result;
the method further comprises the following steps:
establishing communication connection with the daemon client;
sending heartbeat messages to the daemon client according to a preset time interval, so that the daemon client judges whether the monitoring client is in an operating state or not by monitoring the heartbeat messages.
7. An information monitoring device, applied to a monitoring client in an information monitoring system, wherein the information monitoring system comprises: the system comprises a monitoring client, a server and a daemon client, wherein the daemon client and the monitoring client are installed in the same electronic equipment; the device comprises: the system comprises an access monitoring module, an information capturing module and an information sending module; wherein the content of the first and second substances,
the access monitoring module is used for monitoring whether a webpage access operation exists in a monitored object in the electronic equipment where the monitoring client side is located, and if the webpage access operation exists in the monitored object, the information capturing module is triggered;
the information capturing module is used for capturing webpage information of a webpage accessed by the monitoring object;
the information sending module is used for sending the webpage information to the server so that the server analyzes the webpage information by combining a preset webpage classification database and monitors whether the webpage accessed by the monitored object is a webpage allowed to be accessed or not;
the connection establishing module is used for establishing communication connection with the daemon client;
the message sending module is used for sending heartbeat messages to the daemon client according to a preset time interval, so that the daemon client can judge whether the monitoring client is in an operating state or not by monitoring the heartbeat messages.
8. The utility model provides an electronic equipment which characterized in that, electronic equipment is for installing the equipment of monitoring customer end and guard client in the information monitoring system, wherein, the information monitoring system includes: the monitoring client, the server and the daemon client, the electronic device comprises: a processor and a machine-readable storage medium storing machine-executable instructions executable by the processor, the processor being caused by the machine-executable instructions to: implementing the method steps of claim 6.
9. A machine-readable storage medium, the machine-readable storage medium comprising: install the storage medium of the electronic equipment who monitors client and guard client in the information monitoring system, wherein, the information monitoring system includes: the listening client, server, and the daemon client, the machine-readable storage medium storing machine-executable instructions that, when invoked and executed by a processor, cause the processor to: implementing the method steps of claim 6.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710423034.5A CN107547502B (en) | 2017-06-07 | 2017-06-07 | Information monitoring system, method and device, electronic equipment and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710423034.5A CN107547502B (en) | 2017-06-07 | 2017-06-07 | Information monitoring system, method and device, electronic equipment and storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN107547502A CN107547502A (en) | 2018-01-05 |
| CN107547502B true CN107547502B (en) | 2021-02-23 |
Family
ID=60966824
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201710423034.5A Active CN107547502B (en) | 2017-06-07 | 2017-06-07 | Information monitoring system, method and device, electronic equipment and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN107547502B (en) |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110659435A (en) * | 2019-08-14 | 2020-01-07 | 平安普惠企业管理有限公司 | Page data acquisition processing method and device, computer equipment and storage medium |
| CN111309574B (en) * | 2020-02-17 | 2023-09-05 | 北京百度网讯科技有限公司 | Information processing method, device and equipment |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR20050103846A (en) * | 2004-04-27 | 2005-11-01 | 박정호 | Real time monitoring method of web surfing |
| CN102394885A (en) * | 2011-11-09 | 2012-03-28 | 中国人民解放军信息工程大学 | Information classification protection automatic verification method based on data stream |
| CN202799005U (en) * | 2012-09-11 | 2013-03-13 | 天讯天网(福建)网络科技有限公司 | Cloud computing based internet monitoring system of set top box and set top box |
| CN103049831A (en) * | 2013-01-30 | 2013-04-17 | 安徽爱普科技有限公司 | Monitoring system for examining internet surfing efficiency |
Family Cites Families (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102984020B (en) * | 2011-09-07 | 2015-06-17 | 天讯天网(福建)网络科技有限公司 | Cloud-computation-based net surfing monitoring method and monitoring system and monitoring server |
| CN102685215B (en) * | 2012-04-18 | 2015-12-16 | 华为技术有限公司 | The methods, devices and systems of mobile terminal Internet access monitoring |
| US10606626B2 (en) * | 2014-12-29 | 2020-03-31 | Nicira, Inc. | Introspection method and apparatus for network access filtering |
-
2017
- 2017-06-07 CN CN201710423034.5A patent/CN107547502B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR20050103846A (en) * | 2004-04-27 | 2005-11-01 | 박정호 | Real time monitoring method of web surfing |
| CN102394885A (en) * | 2011-11-09 | 2012-03-28 | 中国人民解放军信息工程大学 | Information classification protection automatic verification method based on data stream |
| CN202799005U (en) * | 2012-09-11 | 2013-03-13 | 天讯天网(福建)网络科技有限公司 | Cloud computing based internet monitoring system of set top box and set top box |
| CN103049831A (en) * | 2013-01-30 | 2013-04-17 | 安徽爱普科技有限公司 | Monitoring system for examining internet surfing efficiency |
Also Published As
| Publication number | Publication date |
|---|---|
| CN107547502A (en) | 2018-01-05 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110096659B (en) | Page display method, device and equipment and readable storage medium | |
| US9794242B2 (en) | Method, apparatus and application platform for realizing logon to an application service website | |
| US9578045B2 (en) | Method and apparatus for providing forensic visibility into systems and networks | |
| US9269061B2 (en) | Performance, analytics and auditing framework for portal applications | |
| US7954152B2 (en) | Session management by analysis of requests and responses | |
| US20160156653A1 (en) | Method and Device for Identifying User Behavior | |
| JP2017004544A (en) | Interactivity analyses of web resources based on reload events | |
| CN110309029B (en) | Abnormal data acquisition method and device, computer equipment and storage medium | |
| US20140330960A1 (en) | Systems and Methods for Identifying Applications in Mobile Networks | |
| US8661456B2 (en) | Extendable event processing through services | |
| CN111176941B (en) | Data processing method, device and storage medium | |
| CN111106976B (en) | Detection method and device for CDN network, electronic equipment and readable storage medium | |
| US20150222649A1 (en) | Method and apparatus for processing a webpage | |
| CN111079138A (en) | Abnormal access detection method and device, electronic equipment and readable storage medium | |
| CN107547502B (en) | Information monitoring system, method and device, electronic equipment and storage medium | |
| US9191285B1 (en) | Automatic web service monitoring | |
| US11962666B2 (en) | User-configurable end user monitoring (EUM) | |
| CN109361574A (en) | NAT detection method, system, medium and equipment based on JavaScript script | |
| CN110347955B (en) | Resource detection method and device | |
| US10785281B1 (en) | Breaking down the load time of a web page into coherent components | |
| CN103685298A (en) | Deep packet inspection based SSL (Secure Sockets Layer) man-in-the-middle attack discovering method | |
| CN110784364B (en) | Data monitoring method and device, storage medium and terminal | |
| CN109495602B (en) | Method and device for processing network access abnormity | |
| CN104219219A (en) | Method, server and system for handling data | |
| CN108880920B (en) | Cloud service management method and device and electronic equipment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |