CN108920589A - Browsing kidnaps recognition methods, device, server and storage medium - Google Patents
Browsing kidnaps recognition methods, device, server and storage medium Download PDFInfo
- Publication number
- CN108920589A CN108920589A CN201810671182.3A CN201810671182A CN108920589A CN 108920589 A CN108920589 A CN 108920589A CN 201810671182 A CN201810671182 A CN 201810671182A CN 108920589 A CN108920589 A CN 108920589A
- Authority
- CN
- China
- Prior art keywords
- browsing pages
- browsing
- url
- sampling
- pages url
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Landscapes
- Information Transfer Between Computers (AREA)
Abstract
A kind of browsing is provided in the embodiment of the present invention kidnaps recognition methods, device, server and storage medium.This method includes：Obtain the page network request feature set that sampling end uploads, wherein, the resource characteristic for including in browsing pages URL, sampling end feature and browsing pages in page network request feature set including each sampling end, the differentiation resource characteristic collection of browsing pages URL is determined according to the resource characteristic for including in each browsing pages associated by browsing pages URL, according to sampling number and sampling end feature associated by the differentiations resource characteristic collection of browsing pages URL, browsing pages URL, identify whether browsing pages URL has abduction.The data that the technical solution of the embodiment of the present invention can be uploaded according to each sampling end carry out browsing by way of authenticating in many ways and kidnap identification, can not only identify the problem of orientation is kidnapped, additionally it is possible to which the problem of identifying universal abduction improves the safety of browsing.
Description
Technical field
The present embodiments relate to computer internet technical fields more particularly to a kind of browsing to kidnap recognition methods, dress
It sets, server and storage medium.
Background technique
User is when carrying out webpage and website access using the user terminal of such as mobile phone and computer etc, it will usually use browsing
The application of device or insertion browsing kernel, specially user terminal are sent by the application of browser or insertion browsing kernel to server
Browse request, server is according to browse request to client feeds back browsing content.
However, since the data transmission between user terminal and server needs to set by physical transfers such as router, gateways
Standby to carry out transfer, physical transfer equipment may will do it the data (i.e. progress network data abduction) for distorting transmission, for example, by force
It is directed to business website, silence downloading invalid content distorts content or injection push content etc. in webpage in webpage.Network
The defects such as abduction has reduction access efficiency, and consuming customer flow and information credibility are low.
In the prior art, the application for often relying on browser or insertion browsing kernel and the data between local server
Transmission is kidnapped to identify whether to occur network, but existing technology can only identify that orientation is kidnapped, and cannot but identify universal misfortune
It holds.
Summary of the invention
A kind of browsing provided by the invention kidnaps recognition methods, device, server and storage medium, and it is fixed can be applicable in identification
To abduction and universal abduction problem, the safety of browsing is improved.
In a first aspect, providing a kind of browsing abduction recognition methods in the embodiment of the present invention, this method includes：
Obtain the page network request feature set that sampling end uploads, wherein include in the page network request feature set
The resource characteristic for including in the browsing pages URL of each sampling end, sampling end feature and browsing pages；
For each browsing pages URL, according to the money for including in each browsing pages associated by the browsing pages URL
Source feature determines the differentiation resource characteristic collection of the browsing pages URL；
According to sampling number associated by the differentiation resource characteristic collection of the browsing pages URL, the browsing pages URL with
And the sampling end feature, identify whether the browsing pages URL has abduction.
Second aspect additionally provides a kind of browsing in the embodiment of the present invention and kidnaps identification device, which includes：
Module is obtained, for obtaining the page network request feature set of sampling end upload, wherein the page network request
The resource characteristic for including in browsing pages URL, sampling end feature and browsing pages in feature set including each sampling end；
Determining module, for being directed to each browsing pages URL, according to each browsing associated by the browsing pages URL
The resource characteristic for including in the page determines the differentiation resource characteristic collection of the browsing pages URL；
Identification module is closed for differentiation resource characteristic collection, the browsing pages URL according to the browsing pages URL
The sampling number of connection and the sampling end feature, identify whether the browsing pages URL has abduction.
The third aspect additionally provides a kind of server in the embodiment of the present invention, which includes：
One or more processors；
Storage device, for storing one or more programs,
When one or more of programs are executed by one or more of processors, so that one or more of processing
Device realizes that as above any browsing kidnaps recognition methods.
Fourth aspect additionally provides a kind of computer readable storage medium in the embodiment of the present invention, is stored thereon with calculating
Machine program realizes that as above any browsing kidnaps recognition methods when the program is executed by processor.
A kind of browsing abduction recognition methods is provided in the embodiment of the present invention, obtains the page network request that sampling end uploads
Feature set, wherein in the page network request feature set including the browsing pages URL of each sampling end, sampling end feature and
The resource characteristic for including in browsing pages, for each browsing pages URL, according to each associated by the browsing pages URL
The resource characteristic for including in browsing pages determines the differentiation resource characteristic collection of the browsing pages URL, according to the browsing pages
Sampling number and the sampling end feature associated by the differentiation resource characteristic collection of URL, the browsing pages URL identify institute
State whether browsing pages URL has abduction.Browsing in the embodiment of the present invention kidnaps recognition methods can be according on each sampling end
The data of biography carry out browsing by way of authenticating in many ways and kidnap identification, can not only identify the problem of orientation is kidnapped, additionally it is possible to
The problem of identifying universal abduction improves the safety of browsing.
Detailed description of the invention
Fig. 1 shows the flow diagram that a kind of browsing provided in the embodiment of the present invention one kidnaps recognition methods；
Fig. 2 shows the flow diagrams that a kind of browsing provided in the embodiment of the present invention two kidnaps recognition methods；
Fig. 3 shows the structural schematic diagram that a kind of browsing provided in the embodiment of the present invention three kidnaps identification device；
Fig. 4 shows a kind of structural schematic diagram of the server provided in the embodiment of the present invention four.
Specific embodiment
The present invention is described in further detail with reference to the accompanying drawings and examples.It is understood that this place is retouched
The specific embodiment stated is used only for explaining the present invention rather than limiting the invention.It also should be noted that in order to just
Only the parts related to the present invention are shown in description, attached drawing rather than entire infrastructure.
It should be mentioned that some exemplary embodiments are described as before exemplary embodiment is discussed in greater detail
The processing or method described as flow chart.Although operations (or step) are described as the processing of sequence by flow chart,
Many of these operations can be implemented concurrently, concomitantly or simultaneously.In addition, the sequence of operations can be pacified again
Row.The processing can be terminated when its operations are completed, it is also possible to have the additional step being not included in attached drawing.Institute
Stating processing can correspond to method, function, regulation, subroutine, subprogram etc..
Embodiment one
Fig. 1 shows the flow diagram that a kind of browsing provided in the embodiment of the present invention one kidnaps recognition methods, this hair
Bright embodiment can be applied to detect whether there are the scene that web page browsing is kidnapped, this method can be kidnapped by browsing identification device
It executes, which can be realized by the way of software and/or hardware, which, which can integrate, has network communication function any
The server of energy.
As shown in Figure 1, the browsing abduction recognition methods in the embodiment of the present invention may include：
Step S101, the page network request feature set that sampling end uploads is obtained, wherein in page network request feature set
The resource characteristic for including in browsing pages URL, sampling end feature and browsing pages including each sampling end.
In embodiments of the present invention, sampling end can be the various terminal equipment of supported web page browsing, for example, terminal device
Including but not limited to smart phone, tablet computer, pocket computer on knee and desktop computer etc..Different users can be with
It is interacted by network from different servers using different terminal devices, to receive or send message.Terminal device can
To install various client applications.For example, the client application of web browser or insertion browsing kernel.The network can be to have
The various connection types such as line, wireless communication link, fiber optic cables can also include the physics such as various routers, gateway in network
Transmission device.Each terminal device can send page network request to each server by network, and each server can be with
Browsing pages content corresponding with the page network request is returned to terminal device according to the page network request received.
In general, the client application of the web browser being arranged on terminal device or insertion browsing kernel can be used in user
Carry out browsing pages, user can be by directly inputting in the browsing pages presented in network address or webpage clicking browser at this time
Chain fetches to server and sends page network request.Wherein, network address is generally by uniform resource locator (Uniform
ResourceLocator, URL) it indicates.The terminal device of different user receives corresponding with page network request clear
Looking at content of pages may be different.Why there is such case, be because from server to terminal device during,
It needs by the physical transfers equipment such as many routers and gateway, there are the possibility that the content of browsing pages is held as a hostage.For example, one
A businessman wishes to promote the content of oneself, by the content oneself promoted with the browsing of general reference format injection server transport
In content of pages or a malice steals the viral of flow and the script that one can obtain data from the background is injected server transport
Browsing pages content in, cause browsing pages to be held as a hostage.
In embodiments of the present invention, each sampling end can be counted when sending each page network request to server
And generate the feature set of the corresponding page network request of each page network request.Page network request feature set may include each
The resource characteristic for including in the browsing pages URL of sampling end, sampling end feature and browsing pages.Browsing pages may include
Html format, xhtml format, asp format, php format, jsp format, shtml format, nsp format, xml format webpage page
The Webpage of face or other following formats by exploitation.As long as it is understood that can be opened and be browsed with browser
It includes the web page files of any format of the contents such as picture, animation, text can be used as the browse page in the present embodiment
Face.Sampling end feature may include locating geographical location and the network class used when each sampling end sends page network request
The network environment informations such as type.Wherein, geographical location may include the positions such as Tianjin, Shanghai or Shenzhen；Network type can be
One of local area network, Metropolitan Area Network (MAN), wide area network can also be one of other network types, such as mobile communications network, connection
Communication network etc. all.In addition, sampling end feature can also include the degree of strength of sampling end network, for example network is unobstructed or network
It is obstructed etc..When receiving server return browsing pages corresponding with page network request, each sampling end can be remembered
The resource characteristic for including in record browsing pages.Wherein, the resource characteristic for including in browsing pages may include browsing pages content
Resource URL, browsing pages expend flow, the script in browsing pages, the label in browsing pages, in browsing pages insert
Part, the static images being arranged in browsing pages, dynamic picture and/or video and word content link one or more.
In embodiments of the present invention, each sampling end can upload at once when generating page network request feature set,
Page network request feature set can be uploaded according to preset period of time.Wherein, preset period of time can be the time of setting
It is interval or time point, specific for example, page network request feature set, or consolidating in setting can be uploaded with per half an hour
It fixes time (8 points, 9 points or 12 points) upload page network request feature sets of point.When detecting that each sampling end uploads page net
When network requests feature set, browsing, which kidnaps identification device, can directly acquire the page network request feature set of sampling end upload.Its
In, include in the browsing pages URL, sampling end feature and browsing pages in page network request feature set including each sampling end
Resource characteristic.
Step S102, it is directed to each browsing pages URL, is wrapped in each browsing pages associated by foundation browsing pages URL
The resource characteristic included determines the differentiation resource characteristic collection of browsing pages URL.
In embodiments of the present invention, browsing kidnap identification device obtain sampling end upload page network request feature set it
Afterwards, the associated each browsing of each browsing pages URL can be searched from the page network request feature set that sampling end uploads
The page, and from obtaining the resource characteristic for including in each browsing pages in each browsing pages.It is understood that passing through browsing
The browsing pages that page URL is opened can be used as each browsing pages associated by browsing pages URL.Browsing pages URL institute
The each resource characteristic for including in associated each browsing pages may be identical, it is also possible to not identical.Illustratively, it is contemplated that adopt
The factor of sample end feature sends page network request to server by different sampling ends using identical browsing pages URL
When, server, which responds the page network request that different sampling ends are sent, may return to different browsing pages, corresponding different
The resource characteristic for including in browsing pages is not also identical.Wherein, different sampling ends can be understood as geographical location, network type with
And sampling end equipment is different.For example, the browse page that user is obtained by different terminal devices using identical browsing pages URL
It face may be identical, it is also possible to not identical.In addition, being sent out by identical sampling end to server using identical browsing pages URL
Page network request is sent, the page network request that server response sample end is sent may return to different browsing pages.Example
It such as, may be comprising the contents such as different advertisements, corresponding phase on the browsing pages opened using identical video tour page URL
With browsing pages in include the resource URL of browsing pages content, the browsing pages flow, the foot in browsing pages that expend
Sheet, the label in browsing pages, the plug-in unit in browsing pages, the static images being arranged in browsing pages, dynamic picture and/or
The resource characteristics such as video and word content link may also be not identical.
In embodiments of the present invention, browsing abduction identification device can be according to each browsing associated by browsing pages URL
The resource characteristic for including in the page determines the differentiation resource characteristic collection of browsing pages URL.Wherein, distinguishing resource characteristic collection can manage
Resource characteristic collection composed by different resource characteristic in the resource characteristic that solution includes for each browsing pages.In above scheme
On the basis of provide a kind of optional embodiment, according to the money for including in each browsing pages associated by browsing pages URL
Source feature determines the differentiation resource characteristic collection of browsing pages URL, may include：According to each browsing associated by browsing pages URL
Public resource feature of the intersection for the resource characteristic for including in the page as browsing pages URL, associated by browsing pages URL
The public resource feature that browsing pages URL is rejected in the resource characteristic for including in each browsing pages, by remaining resource characteristic institute
Differentiation resource characteristic collection of the set of composition as browsing pages URL.
Illustratively, it is assumed that there is X user to obtain using current browsing pages URL clear associated by browsing pages URL
Look at the page, wherein the page network request feature set that only Y user uploads browsing pages URL, X>Y.It at this time can be each
The phase of each resource characteristic in each browsing pages associated by browsing pages URL is searched in a page network request feature set
It is same, and the same characteristic features of each resource characteristic are rejected, then by resource characteristic group remaining in each resource characteristic
Differentiation resource characteristic collection of the set of Cheng Xin as browsing pages URL.
Step S103, according to sampling number associated by the differentiation resource characteristic collection of browsing pages URL, browsing pages URL
And whether sampling end feature, identification browsing pages URL have abduction.
In embodiments of the present invention, sampling number associated by browsing pages URL can be understood as the page of sampling end upload
The access times for the browsing pages URL for including in torus network request feature set.Wherein, sampling end is every uses a browsing pages
URL can according to browsing pages URL open browsing pages URL associated by browsing pages, and record sampling end using browsing
The resource characteristic for including in sampling end feature when page URL and the browsing pages according to browsing pages URL opening.It is worth note
Meaning, may be different according to the resource characteristic for including in the browsing pages of identical browsing pages URL opening, specific former
It is not discussed here because illustrating in front.In differentiation resource characteristic collection, the browsing pages URL for determining browsing pages URL
After associated sampling number and sampling end feature, browsing kidnaps identification device can be according to determining browsing pages URL
Differentiation resource characteristic collection, sampling number and sampling end feature associated by browsing pages URL, identification browsing pages URL is
It is no to kidnap.
Provide a kind of optional way on the basis of above scheme, according to browsing pages URL differentiation resource characteristic collection,
Whether sampling number associated by browsing pages URL and sampling end feature, identification browsing pages URL have abduction, may include：
If the differentiation resource characteristic of browsing pages URL integrates as nonempty set, sampling number associated by browsing pages URL is big
In the first sampling number threshold value, and sampling end feature is different, then identifies that browsing pages URL has abduction.
In the present embodiment, the differentiation resource characteristic of browsing pages URL, which integrates, can be understood as each adopt as nonempty set
There are different resource characteristics between the resource characteristic that browsing pages associated by the browsing pages URL at sample end include, i.e.,
The resource characteristic for including between each browsing pages associated by browsing pages URL is not identical.Illustratively, false
If each browsing pages associated by browsing pages URL include：Browsing pages 1, browsing pages 2, browsing pages 3, browsing pages 1
In include resource characteristic be respectively A feature, B feature, C feature, D feature, the resource characteristic for including in browsing pages 2 is respectively
B feature, C feature, D feature, E feature, the resource characteristic for including in browsing pages 3 are respectively B feature, D feature, E feature, F special
Sign.From the foregoing, it can be seen that not being identical between the resource characteristic that browsing pages 1, browsing pages 2 and browsing pages 3 include
, there are different resource features between the resource characteristic for including in browsing pages 1 and the resource characteristic for including in browsing pages 2 is
A feature and E feature, there are different between the resource characteristic for including in the resource characteristic and browsing pages 3 for including in browsing pages 2
Resource characteristic is C feature and F feature, then being can be understood as at this time according to each browsing pages associated by browsing pages URL
In include the differentiation resource characteristic collection of browsing pages URL that determines of resource characteristic be nonempty set.
In the present embodiment, during the communication interaction of server and terminal device, browsing pages are passing through router
With the physical transfers equipment such as gateway, browsing pages may be held as a hostage change.If the differentiation resource characteristic collection of browsing pages URL
For nonempty set, then the resource characteristic for including in each browsing pages associated by same browsing pages URL is not inevitable identical.
Further, when the resource characteristic for including in each browsing pages associated by the same browsing pages URL is not identical, Ke Yichu
Step judge that browsing pages may be held as a hostage change in process by the physical transfers such as device and gateway equipment.
In the present embodiment, after the differentiation resource characteristic for determining browsing pages URL integrates as nonempty set, only
Judge that browsing pages may be held as a hostage change in process by the physical transfers such as device and gateway equipment, tentatively in order to which accurate judgement also needs
Consider sampling number associated by browsing pages URL and sampling end feature.If sampling number associated by browsing pages URL
Greater than the first sampling number threshold value, then show that the differentiation resource characteristic of browsing pages URL is a large amount of numbers uploaded by sampling end
It, in this case can be to avoid using the quantitative contingency of low volume data bring according to determining.Wherein, the first sampling threshold
No longer specific here limit can be carried out specifically setting according to the actual situation.
In the present embodiment, since sampling end feature may include that each sampling end is locating when sending page network request
Geographical location and the network environment informations such as the network type that uses, during the communication interaction of server and terminal device,
It, may be just for the sampling with a certain sampling end feature when browsing pages are by physical transfers equipment such as router and gateways
Browsing pages on end carry out abduction modification, but not for the browsing pages on the sampling end with other sampling end features
Modification can be kidnapped, in this case once browsing kidnaps the browsing pages in the page network request feature set that identification device obtains
URL is the abduction identification that mistake is likely to result in when being uploaded by the sampling end with same sampling end feature.For example, it is assumed that
It is kidnapped when each sampling end sends page network request just for the browsing pages on the sampling end for using connection network
Modification, or the browsing pages being on Pekinese's sampling end just for geographical location carry out abduction modification, once browsing is kidnapped
Identify that the browsing pages URL in the page network request feature set obtained is by sampling end or geography with mobile network
The sampling end that position is in Tianjin uploads, then browsing, which kidnaps identification device, will be identified as the browsing pages not being held as a hostage more
Change, the change however browsing pages are in fact held as a hostage, only for the browse page on the sampling end of connection network
The browsing pages that face and geographical location are on Pekinese's sampling end have carried out kidnapping modification.In the present embodiment, if sampling
It holds feature different, then shows that the differentiation resource characteristic collection of browsing pages URL is by the sampling end with different sampling end features
On browsing pages include resource characteristic determine, the differentiation resource characteristic of browsing pages URL can in this case overcome
Drawbacks described above problem caused by the sampling end feature in page network request feature set that sampling end uploads is single, so as to
Abduction identification is carried out to browsing pages from different sampling end features.
A kind of optional way is additionally provided on the basis of above scheme, the differentiation resource characteristic according to browsing pages URL
Whether sampling number and sampling end feature associated by collection, browsing pages URL, identification browsing pages URL have abduction, can wrap
It includes：
If the differentiation resource characteristic of browsing pages URL integrates as nonempty set, sampling number associated by browsing pages URL is small
In the second sampling number threshold value, and sampling end feature is not complete in the presence of sampling, then generates double sampling instruction；Wherein, double sampling
Whether instruction is used to indicate and carries out double sampling to browsing pages URL, and have according to double sampling result identification browsing pages URL
It kidnaps, the first sampling number threshold value is greater than the second sampling number threshold value.
In the present embodiment, sampling number associated by browsing pages URL can be managed less than the second sampling number threshold value
The sampling number that solution kidnaps the browsing pages URL in the page network request feature set that identification device obtains for browsing is fewer,
The sampling number of a small amount of browsing pages URL overcomes the contingency of data, and the browsing that may result in mistake kidnaps identification.Cause
This, optionally, the sampling number associated by the browsing pages URL needs to generate double sampling less than the second sampling number threshold value
Whether instruction to carry out double sampling to browsing pages URL again, and has according to double sampling result identification browsing pages URL
It kidnaps.Wherein, the first sampling number threshold value is greater than the second sampling number threshold value.In addition, the sampling of sampling end feature can not managed entirely
Do not have in the page network request feature that solution uploads for sampling end comprising whole sampling end features, it is understood that there may be a certain sampling end
The page network request feature of feature is not comprised in the page network request characteristic set of sampling end upload, causes sampling end
Feature haves the defects that sampling is not complete.Therefore, optionally, not full-time in the presence of sampling when sampling end feature, need to generate secondary adopt
Whether sample instruction to carry out double sampling to browsing pages URL again, and identifies browsing pages URL according to double sampling result
There is abduction.Wherein, the first sampling number threshold value is greater than the second sampling number threshold value.Optionally, when the differentiation of browsing pages URL provides
Source feature set is nonempty set, sampling number associated by browsing pages URL is less than the second sampling number threshold value, and sampling end is special
Sign is not complete in the presence of sampling, then double sampling instruction is generated, to carry out double sampling to browsing pages URL again, and according to secondary
Whether sampled result identification browsing pages URL has abduction.Specifically, it is in the differentiation resource characteristic collection for determining browsing pages URL
After nonempty set, it is also necessary to determine that sampling number associated by browsing pages URL less than the second sampling number threshold value, and samples
It holds feature to there is the reason of sampling infull operation, goes back with a upper embodiment it needs to be determined that associated by browsing pages URL
Sampling number is greater than the first sampling number threshold value, and sampling end feature has different operations similar, and details are not described herein again.
A kind of optional way is additionally provided on the basis of above scheme, the differentiation resource characteristic according to browsing pages URL
Whether sampling number and sampling end feature associated by collection, browsing pages URL, identification browsing pages URL have abduction, can wrap
It includes：
If the differentiation resource characteristic collection of browsing pages URL is sky, sampling number associated by browsing pages URL is greater than first
Sampling number threshold value, and sampling end feature has sampling, then identifies that browsing pages URL is not kidnapped.
In the present embodiment, if the differentiation resource characteristic collection of browsing pages URL is sky, show that browsing pages URL is closed
It is resource characteristic that is identical, i.e., including in each browsing pages in each browsing pages of connection between the resource characteristic for including
Between there is no different feature.For example, illustrative, it is assumed that each browsing pages associated by browsing pages URL include：It is clear
Look at the page 1, browsing pages 2, browsing pages 3, the resource characteristic for including in browsing pages 1 is respectively A feature, B feature, C feature,
The resource characteristic for including in browsing pages 2 is respectively A feature, B feature, C feature, the resource characteristic for including point in browsing pages 3
It Wei not A feature, B feature, C feature.From the foregoing, it can be seen that the resource characteristic that browsing pages 1, browsing pages 2 and browsing pages 3 include
Be it is identical, can be understood as the differentiation resource characteristic collection of browsing pages URL at this time as sky.If browsing pages URL is closed
The sampling number of connection is greater than the first sampling number threshold value, then shows that browsing is kidnapped the page network characterization that identification device obtains and concentrated
There are a large amount of associated browsing pages of browsing pages URL, then passing through the determining browsing pages URL's of a large amount of browsing pages
Distinguishing resource characteristic collection has certain reliability.If sampling end feature has sampling, show special for all kinds of sampling ends
The browsing pages of sign have sampling, to guarantee the diversity of sampling end feature.
A kind of optional way is additionally provided on the basis of above scheme, the differentiation resource characteristic according to browsing pages URL
Whether sampling number and sampling end feature associated by collection, browsing pages URL, identification browsing pages URL have abduction, can wrap
It includes：
If the differentiation resource characteristic collection of browsing pages URL is sky, sampling number associated by browsing pages URL is less than second
Sampling number threshold value, and sampling end feature has that sampling is not complete, then generates double sampling instruction；Wherein, double sampling
Whether instruction is used to indicate and carries out double sampling to browsing pages URL, and have according to double sampling result identification browsing pages URL
It kidnaps, the first sampling number threshold value is greater than the second sampling number threshold value.Alternatively, if the differentiation resource characteristic collection of browsing pages URL
For sky, sampling number associated by browsing pages URL less than the second sampling number threshold value, and sampling end feature exist sample it is incomplete
The case where, then identify whether browsing pages URL has abduction by way of manual identified.
A kind of browsing abduction recognition methods is provided in the embodiment of the present invention, obtains the page network request that sampling end uploads
Feature set, wherein include browsing pages URL, sampling end feature and the browsing of each sampling end in page network request feature set
The resource characteristic for including in the page, for each browsing pages URL, according to each browsing pages associated by browsing pages URL
In include resource characteristic determine the differentiation resource characteristic collection of browsing pages URL, then the differentiation resource according to browsing pages URL is special
Whether sampling number and sampling end feature associated by collection, browsing pages URL, identification browsing pages URL have abduction.This hair
In bright embodiment browsing kidnap recognition methods can according to each sampling end upload data by way of authenticating in many ways into
Row browsing kidnaps identification, can not only identify the problem of orientation is kidnapped, additionally it is possible to the problem of identifying universal abduction, versatility
By force, the safety of browsing is improved.
Embodiment two
Fig. 2 shows the flow diagrams that a kind of browsing provided in the embodiment of the present invention two kidnaps recognition methods.This reality
It is further excellent on the basis of the above embodiments to apply example.
As shown in Fig. 2, the browsing abduction recognition methods in the embodiment of the present invention may include：
Step S201, the page network request feature set that sampling end uploads is obtained, wherein in page network request feature set
The resource characteristic for including in browsing pages URL, sampling end feature and browsing pages including each sampling end.
Step S202, it is directed to each browsing pages URL, is wrapped in each browsing pages associated by foundation browsing pages URL
The resource characteristic included determines the differentiation resource characteristic collection of browsing pages URL.
Optionally, browse page is determined according to the resource characteristic for including in each browsing pages associated by browsing pages URL
The differentiation resource characteristic collection of face URL may include：
Intersection according to the resource characteristic for including in each browsing pages associated by browsing pages URL is as browsing pages
The public resource feature of URL；Browse page is rejected from the resource characteristic for including in each browsing pages associated by browsing pages URL
The public resource feature of face URL, by differentiation resource characteristic of the set as browsing pages URL composed by remaining resource characteristic
Collection.
Step S203, according to sampling number associated by the differentiation resource characteristic collection of browsing pages URL, browsing pages URL
And whether sampling end feature, identification browsing pages URL have abduction.
Optionally, according to sampling number associated by the differentiation resource characteristic collection of browsing pages URL, browsing pages URL with
And whether sampling end feature, identification browsing pages URL have abduction, may include：
If the differentiation resource characteristic of browsing pages URL integrates as nonempty set, sampling number associated by browsing pages URL is big
In the first sampling number threshold value, and sampling end feature is different, then identifies that browsing pages URL has abduction；Alternatively, if browsing pages
The differentiation resource characteristic of URL integrates as nonempty set, and sampling number associated by browsing pages URL is less than the second sampling number threshold
Value, and sampling end feature is not complete in the presence of sampling, then generates double sampling instruction；Wherein, double sampling instruction is used to indicate to clear
The page URL that lookes at carries out double sampling, and whether has abduction, the first sampling time according to double sampling result identification browsing pages URL
Number threshold value is greater than the second sampling number threshold value.
Optionally, according to sampling number associated by the differentiation resource characteristic collection of browsing pages URL, browsing pages URL with
And whether sampling end feature, identification browsing pages URL have abduction, may include：
If the differentiation resource characteristic collection of browsing pages URL is sky, sampling number associated by browsing pages URL is greater than first
Sampling number threshold value, and sampling end feature has sampling, then identifies that browsing pages URL is not kidnapped.
If step S204, identification browsing pages URL has abduction, misfortune is issued to the user terminal of browsing browsing pages URL
Hold prompting message.
It in embodiments of the present invention, can be directly to the browsing browsing pages when recognizing browsing pages URL has abduction
The user terminal of URL issues abduction prompting message.But if recognizing browsing pages URL in navigation process in user has misfortune
It holds, just issues primary abduction prompting message to user terminal, as long as recognizing browsing pages according to aforesaid operations occurs any abduction
Change (browsing pages including not influencing the viewing experience of browsing pages kidnap change), just must issue abduction to user terminal and mention
Information of waking up causes frequently to issue the browsing of browsing pages caused by prompting message not so as to cause the experience of user's browsing pages
Smooth phenomenon.For this purpose, it is optional, if identification browsing pages URL has abduction, to the user terminal of browsing browsing pages URL
Abduction prompting message is issued, can be specifically included：If identification browsing pages URL has abduction, it is determined that the harm of the browsing pages
Grade；By hazard rating be more than predetermined grade browsing pages intercept, and to browsing browsing pages URL user terminal under
Hair kidnaps prompting message.Wherein, hazard rating can be drawn according to influence of the abduction change content to user in browsing pages
Point.For example, occupying smaller browsing pages space, abduction change content for information popularization hazard rating is inferior grade；
Occupy larger browsing pages space, for information popularization abduction change content hazard rating be middle grade；It steals on backstage
The hazard rating of the abduction change content of customer flow is time menace level；Steal the harm of the abduction change content of user information
Grade is menace level.Predetermined grade can be medium hazard rating.This have the advantage that：To more than predetermined grade
The browsing pages for kidnapping content are intercepted, and issue abduction prompting message, can be to avoid due to no more than predetermined grade
The browsing pages for kidnapping content are frequently intercepted and issue the slack phenomenon of browsing of browsing pages caused by prompting message.
It is understood that prompting message can be with interim when issuing abduction prompting message to the user terminal of browsing browsing pages URL
The form for playing frame is temporarily shown on the terminal device of user terminal, to achieve the purpose that prompt user.
A kind of optional way is provided on the basis of above scheme, after whether identification browsing pages URL has abduction,
Can also include：
If determining that there are different sampling ends according to the differentiation resource characteristic collection of browsing pages URL and being expended to browsing pages
Flow difference be greater than flow threshold, and different sampling end is not carried out artificial down operation, it is determined that browsing pages have silence
Downloading is kidnapped.
In the present embodiment, the resource characteristic for including in browsing pages may include browsing pages content resource URL,
The flow of browsing pages consuming, the script in browsing pages, the label in browsing pages, the plug-in unit in browsing pages, setting exist
Static images, dynamic picture and/or video and word content in browsing pages link one or more.Ordinary circumstance
Under, different sampling ends spent flow when opening browsing pages using identical browsing pages URL should be it is roughly the same,
Without too big difference；Spent flow when if different sampling ends is using same browsing pages URL opening browsing pages
Difference it is very big, and sampling end is not carried out artificial down operation, then the associated browsing of browsing pages URL can be determined
There are silence downloadings to kidnap for the page.
A kind of browsing abduction recognition methods is provided in the embodiment of the present invention, can obtain the page that each collection terminal uploads
Network characterization collection, the data uploaded according to each sampling end carry out browsing abduction identification, Ke Yiti by way of authenticating in many ways
The accuracy that height identification browsing pages content is kidnapped, can not only identify the problem of orientation is kidnapped, additionally it is possible to identify general
The problem of type is kidnapped enhances user in browsing pages mistake so that the abduction problem to browsing pages content is taken precautions against and handled
Safety in journey.
Embodiment three
Fig. 3 shows the structural schematic diagram that a kind of browsing provided in the embodiment of the present invention three kidnaps identification device, this hair
Bright embodiment can be applied to detect whether that the device can be using software and/or hardware there are the scene that web page browsing is kidnapped
Mode realizes that the device can integrate in any server with network communicating function, which can be cloud device.
As shown in figure 3, the browsing abduction identification device in the embodiment of the present invention may include：It obtains module 301, determine mould
Block 302 and identification module 303, wherein：
Module 301 is obtained, for obtaining the page network request feature set of sampling end upload, wherein the page network
The resource characteristic for including in browsing pages URL, sampling end feature and browsing pages in request feature set including each sampling end.
Determining module, for being directed to each browsing pages URL, according to each browsing associated by the browsing pages URL
The resource characteristic for including in the page determines the differentiation resource characteristic collection of the browsing pages URL.
Identification module is closed for differentiation resource characteristic collection, the browsing pages URL according to the browsing pages URL
The sampling number of connection and the sampling end feature, identify whether the browsing pages URL has abduction.
On the basis of above scheme, optionally, the determining module 302 may include：First determination unit and second
Determination unit, wherein：
First determination unit, for special according to the resource for including in each browsing pages associated by the browsing pages URL
Public resource feature of the intersection of sign as the browsing pages URL.
Second determination unit, the resource characteristic for including from each browsing pages associated by the browsing pages URL
The middle public resource feature for rejecting the browsing pages URL regard set composed by remaining resource characteristic as the browsing
The differentiation resource characteristic collection of page URL.
On the basis of above scheme, optionally, the identification module 303 be can specifically include：First recognition unit or
Second recognition unit, wherein：
First recognition unit, if the differentiation resource characteristic for the browsing pages URL integrates as nonempty set, the browsing
Sampling number associated by page URL is greater than the first sampling number threshold value, and the sampling end feature is different, then described in identification
Browsing pages URL has abduction.Alternatively,
Second recognition unit, if the differentiation resource characteristic for the browsing pages URL integrates as nonempty set, the browsing
Sampling number associated by page URL is less than the second sampling number threshold value, and the sampling end feature is not complete in the presence of sampling, then gives birth to
It is instructed at double sampling；Wherein, the double sampling instruction, which is used to indicate, carries out double sampling to the browsing pages URL, and
Identify whether the browsing pages URL has an abduction according to double sampling result, the first sampling number threshold value is greater than described the
Two sampling number threshold values.
On the basis of above scheme, optionally, the identification module 303 be can specifically include：
Third recognition unit, if the differentiation resource characteristic collection for the browsing pages URL is sky, the browsing pages
Sampling number associated by URL is greater than the first sampling number threshold value, and the sampling end feature has sampling, then identifies described clear
The page URL that lookes at is not kidnapped.
On the basis of above scheme, optionally, the browsing in the embodiment of the present invention kidnaps identification device, can also wrap
It includes：
Silence downloading identification module 304, if determination is deposited for the differentiation resource characteristic collection according to the browsing pages URL
Flow threshold is greater than to the flow difference that the browsing pages expend in different sampling ends, and the different sampling ends are not held
Pedestrian's work down operation, it is determined that the browsing pages have silent downloading to kidnap.
On the basis of above scheme, optionally, the browsing in the embodiment of the present invention kidnaps identification device, can also wrap
It includes：
Reminding module 305 is kidnapped, if for identifying that the browsing pages URL has abduction, to the browsing browsing pages
The user terminal of URL issues abduction prompting message.
Browsing abduction identification device provided by the embodiment of the present invention can be performed provided by any embodiment of the invention clear
It lookes at and kidnaps recognition methods, have the corresponding functional module of execution method and beneficial effect.
Example IV
Fig. 4 shows a kind of structural schematic diagram of the server provided in the embodiment of the present invention four.It present embodiments provides
A kind of server 400 comprising：One or more processors 420；Storage device 410, for storing one or more programs,
When one or more of programs are executed by one or more of processors 420, so that one or more of processors 420
Realize that the browsing provided in the embodiment of the present invention kidnaps recognition methods, which kidnaps recognition methods and may include：
Obtain the page network request feature set that sampling end uploads, wherein include in the page network request feature set
The resource characteristic for including in the browsing pages URL of each sampling end, sampling end feature and browsing pages；
For each browsing pages URL, according to the money for including in each browsing pages associated by the browsing pages URL
Source feature determines the differentiation resource characteristic collection of the browsing pages URL；
According to sampling number associated by the differentiation resource characteristic collection of the browsing pages URL, the browsing pages URL with
And the sampling end feature, identify whether the browsing pages URL has abduction.
Certainly, it will be understood by those skilled in the art that processor 420 can also be realized in any embodiment of that present invention is mentioned
The browsing of confession kidnaps the technical solution of recognition methods.
The server 400 that Fig. 4 is shown is only an example, should not function and use scope band to the embodiment of the present invention
Carry out any restrictions.
As shown in figure 4, server 400 is showed in the form of universal computing device.The component of server 400 may include but
It is not limited to：One or more processor 420, storage device 410 connect different system components (including storage device 410 and place
Manage device 420) bus 450.
Bus 450 indicates one of a few class bus structures or a variety of, including memory bus or Memory Controller,
Peripheral bus, graphics acceleration port, processor or the local bus using any bus structures in a variety of bus structures.It lifts
For example, these architectures include but is not limited to industry standard architecture (ISA) bus, microchannel architecture (MAC)
Bus, enhanced isa bus, Video Electronics Standards Association (VESA) local bus and peripheral component interconnection (PCI) bus.
Server 400 typically comprises a variety of computer system readable media.These media can be it is any can be electric
The usable medium that sub- equipment 400 accesses, including volatile and non-volatile media, moveable and immovable medium.
Storage device 410 may include the computer system readable media of form of volatile memory, such as arbitrary access
Memory (RAM) 411 and/or cache memory 412.Server 400 may further include other removable/not removable
Dynamic, volatile/non-volatile computer system storage medium.Only as an example, storage system 413 can be used for read and write can not
Mobile, non-volatile magnetic media (Fig. 4 do not show, commonly referred to as " hard disk drive ").Although not shown in fig 4, Ke Yiti
For the disc driver for being read and write to removable non-volatile magnetic disk (such as " floppy disk "), and to moving non-volatile light
The CD drive of disk (such as CD-ROM, DVD-ROM or other optical mediums) read-write.In these cases, each driver
It can be connected by one or more data media interfaces with bus 450.Storage device 410 may include at least one program
Product, the program product have one group of (for example, at least one) program module, these program modules are configured to perform the present invention
The function of each embodiment.
Program/utility 414 with one group of (at least one) program module 415 can store in such as storage dress
It sets in 410, such program module 415 includes but is not limited to operating system, one or more application program, other program moulds
It may include the realization of network environment in block and program data, each of these examples or certain combination.Program module
415 usually execute function and/or method in any embodiment described in the invention.
Server 400 can also be with one or more external equipments 460 (such as keyboard, sensing equipment, display 470 etc.)
Communication, can also be enabled a user to one or more equipment interact with the server 400 communicate, and/or with make the electricity
Any equipment (such as network interface card, modem etc. that sub- equipment 400 can be communicated with one or more of the other calculating equipment
Deng) communication.This communication can be carried out by input/output (I/O) interface 430.Also, server 400 can also pass through net
Network adapter 440 and one or more network (such as local area network (LAN), wide area network (WAN) and/or public network, such as because
Special net) communication.As shown in figure 4, network adapter 440 is communicated by bus 450 with other modules of server 400.It should be bright
It is white, although not shown in the drawings, other hardware and/or software module can be used in conjunction with server 400, including but not limited to：It is micro-
Code, device driver, redundant processing unit, external disk drive array, RAID system, tape drive and data backup
Storage system etc..
The program that processor 420 is stored in storage device 410 by operation, thereby executing various function application and number
According to processing, such as realize that browsing provided in the embodiment of the present invention kidnaps recognition methods.
Embodiment five
A kind of storage medium comprising computer executable instructions, the computer executable instructions are provided in the present embodiment
When being executed by computer processor for executing a kind of browsing abduction recognition methods, which kidnaps recognition methods and can wrap
It includes：
Obtain the page network request feature set that sampling end uploads, wherein include in the page network request feature set
The resource characteristic for including in the browsing pages URL of each sampling end, sampling end feature and browsing pages；
For each browsing pages URL, according to the money for including in each browsing pages associated by the browsing pages URL
Source feature determines the differentiation resource characteristic collection of the browsing pages URL；
According to sampling number associated by the differentiation resource characteristic collection of the browsing pages URL, the browsing pages URL with
And the sampling end feature, identify whether the browsing pages URL has abduction.
Certainly, a kind of storage medium comprising computer executable instructions provided in the embodiment of the present invention calculates
The method operation that machine executable instruction is not limited to the described above, can also be performed browsing provided in any embodiment of that present invention
Kidnap the relevant operation in recognition methods.
The computer storage medium of the embodiment of the present invention, can be using any of one or more computer-readable media
Combination.Computer-readable medium can be computer-readable signal media or computer readable storage medium.It is computer-readable
Storage medium for example may be-but not limited to-the system of electricity, magnetic, optical, electromagnetic, infrared ray or semiconductor, device or
Device, or any above combination.The more specific example (non exhaustive list) of computer readable storage medium includes：Tool
There are electrical connection, the portable computer diskette, hard disk, random access memory (RAM), read-only memory of one or more conducting wires
(ROM), erasable programmable read only memory (EPROM or flash memory), optical fiber, portable compact disc read-only memory (CD-
ROM), light storage device, magnetic memory device or above-mentioned any appropriate combination.In this document, computer-readable storage
Medium can be any tangible medium for including or store program, which can be commanded execution system, device or device
Using or it is in connection.
Computer-readable signal media may include in a base band or as carrier wave a part propagate data-signal,
Wherein carry computer-readable program code.The data-signal of this propagation can take various forms, including but unlimited
In electromagnetic signal, optical signal or above-mentioned any appropriate combination.Computer-readable signal media can also be that computer can
Any computer-readable medium other than storage medium is read, which can send, propagates or transmit and be used for
By the use of instruction execution system, device or device or program in connection.
The program code for including on computer-readable medium can transmit with any suitable medium, including --- but it is unlimited
In wireless, electric wire, optical cable, RF etc. or above-mentioned any appropriate combination.
The computer for executing operation of the present invention can be write with one or more programming languages or combinations thereof
Program code, described program design language include object oriented program language-such as Java, Smalltalk, C++,
It further include conventional procedural programming language-such as " C " language or similar programming language.Program code can be with
It fully executes, partly execute on the user computer on the user computer, being executed as an independent software package, portion
Divide and partially executes or executed on a remote computer or server completely on the remote computer on the user computer.?
Be related in the situation of remote computer, remote computer can pass through the network of any kind --- including local area network (LAN) or
Wide area network (WAN)-be connected to subscriber computer, or, it may be connected to outer computer (such as mentioned using Internet service
It is connected for quotient by internet).
Note that the above is only a better embodiment of the present invention and the applied technical principle.It will be appreciated by those skilled in the art that
The invention is not limited to the specific embodiments described herein, be able to carry out for a person skilled in the art it is various it is apparent variation,
It readjusts and substitutes without departing from protection scope of the present invention.Therefore, although being carried out by above embodiments to the present invention
It is described in further detail, but the present invention is not limited to the above embodiments only, without departing from the inventive concept, also
It may include more other equivalent embodiments, and the scope of the invention is determined by the scope of the appended claims.
Claims (10)
1. a kind of browsing kidnaps recognition methods, which is characterized in that the method includes：
Obtain the page network request feature set that sampling end uploads, wherein include respectively adopting in the page network request feature set
The resource characteristic for including in the browsing pages URL at sample end, sampling end feature and browsing pages；
It is special according to the resource for including in each browsing pages associated by the browsing pages URL for each browsing pages URL
Sign determines the differentiation resource characteristic collection of the browsing pages URL；
According to sampling number and institute associated by the differentiation resource characteristic collection of the browsing pages URL, the browsing pages URL
Sampling end feature is stated, identifies whether the browsing pages URL has abduction.
2. the method according to claim 1, wherein according to each browsing associated by the browsing pages URL
The resource characteristic for including in the page determines the differentiation resource characteristic collection of the browsing pages URL, including：
Intersection according to the resource characteristic for including in each browsing pages associated by the browsing pages URL is as the browse page
The public resource feature of face URL；
The browsing pages URL is rejected from the resource characteristic for including in each browsing pages associated by the browsing pages URL
Public resource feature, will differentiation resource characteristic of the set as the browsing pages URL composed by remaining resource characteristic
Collection.
3. the method according to claim 1, wherein according to the browsing pages URL differentiation resource characteristic collection,
Sampling number associated by the browsing pages URL and the sampling end feature, identify whether the browsing pages URL has misfortune
It holds, including：
If the differentiation resource characteristic of the browsing pages URL integrates as nonempty set, sampling associated by the browsing pages URL time
Number is greater than the first sampling number threshold value, and the sampling end feature is different, then identifies that the browsing pages URL has abduction；Or
Person,
If the differentiation resource characteristic of the browsing pages URL integrates as nonempty set, sampling associated by the browsing pages URL time
Number is less than the second sampling number threshold value, and the sampling end feature is not complete in the presence of sampling, then generates double sampling instruction；Wherein,
The double sampling instruction is used to indicate and carries out double sampling to the browsing pages URL, and identifies according to double sampling result
Whether the browsing pages URL has abduction, and the first sampling number threshold value is greater than the second sampling number threshold value.
4. the method according to claim 1, wherein according to the browsing pages URL differentiation resource characteristic collection,
Sampling number associated by the browsing pages URL and the sampling end feature, identify whether the browsing pages URL has misfortune
It holds, including：
If the differentiation resource characteristic collection of the browsing pages URL is sky, sampling number associated by the browsing pages URL is greater than
First sampling number threshold value, and the sampling end feature has sampling, then identifies that the browsing pages URL is not kidnapped.
5. the method according to claim 1, wherein after identifying whether the browsing pages URL has abduction,
Further include：
If determining that there are different sampling ends to the browsing pages according to the differentiation resource characteristic collection of the browsing pages URL
The flow difference of consuming is greater than flow threshold, and the different sampling ends are not carried out artificial down operation, it is determined that described clear
The page of looking at has silent downloading to kidnap.
6. the method according to claim 1, wherein after identifying whether the browsing pages URL has abduction,
Further include：
If identifying, the browsing pages URL has abduction, issues abduction to the user terminal for browsing the browsing pages URL and reminds letter
Breath.
7. a kind of browsing kidnaps identification device, which is characterized in that described device includes：
Module is obtained, for obtaining the page network request feature set of sampling end upload, wherein the page network request feature
Concentrate the resource characteristic for including in the browsing pages URL including each sampling end, sampling end feature and browsing pages；
Determining module, for being directed to each browsing pages URL, according to each browsing pages associated by the browsing pages URL
In include resource characteristic determine the differentiation resource characteristic collection of the browsing pages URL；
Identification module, for according to the browsing pages URL differentiation resource characteristic collection, associated by the browsing pages URL
Sampling number and the sampling end feature, identify whether the browsing pages URL has abduction.
8. device according to claim 7, which is characterized in that the determining module includes：
First determination unit, for according to the resource characteristic for including in each browsing pages associated by the browsing pages URL
Public resource feature of the intersection as the browsing pages URL；
Second determination unit, for being picked from the resource characteristic for including in each browsing pages associated by the browsing pages URL
Except the public resource feature of the browsing pages URL, it regard set composed by remaining resource characteristic as the browsing pages
The differentiation resource characteristic collection of URL.
9. a kind of server, which is characterized in that the server includes：
One or more processors；
Storage device, for storing one or more programs；
One or more of programs are executed by one or more of processors, so that one or more of processors are realized
As browsing of any of claims 1-6 kidnaps recognition methods.
10. a kind of computer readable storage medium, is stored thereon with computer program, which is characterized in that the program is by processor
Realize that browsing as claimed in any one of claims 1 to 6 kidnaps recognition methods when execution.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810671182.3A CN108920589B (en) | 2018-06-26 | 2018-06-26 | Browsing hijacking identification method, device, server and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810671182.3A CN108920589B (en) | 2018-06-26 | 2018-06-26 | Browsing hijacking identification method, device, server and storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN108920589A true CN108920589A (en) | 2018-11-30 |
| CN108920589B CN108920589B (en) | 2021-08-10 |
Family
ID=64421393
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201810671182.3A Active CN108920589B (en) | 2018-06-26 | 2018-06-26 | Browsing hijacking identification method, device, server and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN108920589B (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2022252882A1 (en) * | 2021-06-02 | 2022-12-08 | Oppo广东移动通信有限公司 | Anti-hijacking method and apparatus for browser webpage, and electronic device and storage medium |
Citations (14)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101820419A (en) * | 2010-03-23 | 2010-09-01 | 北京大学 | Method for automatically positioning webpage Trojan mount point in Trojan linked webpage |
| CN102594934A (en) * | 2011-12-30 | 2012-07-18 | 奇智软件（北京）有限公司 | Method and device for identifying hijacked website |
| CN103279475A (en) * | 2013-04-11 | 2013-09-04 | 广东电网公司信息中心 | Detection method and system for WEB application system content change |
| CN104125121A (en) * | 2014-08-15 | 2014-10-29 | 携程计算机技术（上海）有限公司 | Network hijacking behavior detecting system and method |
| CN104156665A (en) * | 2014-07-22 | 2014-11-19 | 杭州安恒信息技术有限公司 | Web page tampering monitoring method |
| US20140380477A1 (en) * | 2011-12-30 | 2014-12-25 | Beijing Qihoo Technology Company Limited | Methods and devices for identifying tampered webpage and inentifying hijacked web address |
| CN105245518A (en) * | 2015-09-30 | 2016-01-13 | 小米科技有限责任公司 | Website hijacking detection method and device |
| US20170126715A1 (en) * | 2014-06-30 | 2017-05-04 | Nippon Telegraph And Telephone Corporation | Detection device, detection method, and detection program |
| CN106911693A (en) * | 2017-02-27 | 2017-06-30 | 百度在线网络技术（北京）有限公司 | For detecting method, device and terminal device that web page contents are kidnapped |
| CN107124430A (en) * | 2017-06-08 | 2017-09-01 | 腾讯科技（深圳）有限公司 | Pagejack monitoring method, device, system and storage medium |
| CN107566320A (en) * | 2016-06-30 | 2018-01-09 | 中国电信股份有限公司 | A kind of network kidnaps detection method, device and network system |
| CN107592312A (en) * | 2017-09-18 | 2018-01-16 | 济南互信软件有限公司 | A kind of malware detection method based on network traffics |
| CN107612908A (en) * | 2017-09-15 | 2018-01-19 | 杭州安恒信息技术有限公司 | webpage tamper monitoring method and device |
| CN108182370A (en) * | 2018-02-02 | 2018-06-19 | 上海斗象信息科技有限公司 | Client terminal web page altering detecting method based on sound state separation template |
-
2018
- 2018-06-26 CN CN201810671182.3A patent/CN108920589B/en active Active
Patent Citations (14)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101820419A (en) * | 2010-03-23 | 2010-09-01 | 北京大学 | Method for automatically positioning webpage Trojan mount point in Trojan linked webpage |
| CN102594934A (en) * | 2011-12-30 | 2012-07-18 | 奇智软件（北京）有限公司 | Method and device for identifying hijacked website |
| US20140380477A1 (en) * | 2011-12-30 | 2014-12-25 | Beijing Qihoo Technology Company Limited | Methods and devices for identifying tampered webpage and inentifying hijacked web address |
| CN103279475A (en) * | 2013-04-11 | 2013-09-04 | 广东电网公司信息中心 | Detection method and system for WEB application system content change |
| US20170126715A1 (en) * | 2014-06-30 | 2017-05-04 | Nippon Telegraph And Telephone Corporation | Detection device, detection method, and detection program |
| CN104156665A (en) * | 2014-07-22 | 2014-11-19 | 杭州安恒信息技术有限公司 | Web page tampering monitoring method |
| CN104125121A (en) * | 2014-08-15 | 2014-10-29 | 携程计算机技术（上海）有限公司 | Network hijacking behavior detecting system and method |
| CN105245518A (en) * | 2015-09-30 | 2016-01-13 | 小米科技有限责任公司 | Website hijacking detection method and device |
| CN107566320A (en) * | 2016-06-30 | 2018-01-09 | 中国电信股份有限公司 | A kind of network kidnaps detection method, device and network system |
| CN106911693A (en) * | 2017-02-27 | 2017-06-30 | 百度在线网络技术（北京）有限公司 | For detecting method, device and terminal device that web page contents are kidnapped |
| CN107124430A (en) * | 2017-06-08 | 2017-09-01 | 腾讯科技（深圳）有限公司 | Pagejack monitoring method, device, system and storage medium |
| CN107612908A (en) * | 2017-09-15 | 2018-01-19 | 杭州安恒信息技术有限公司 | webpage tamper monitoring method and device |
| CN107592312A (en) * | 2017-09-18 | 2018-01-16 | 济南互信软件有限公司 | A kind of malware detection method based on network traffics |
| CN108182370A (en) * | 2018-02-02 | 2018-06-19 | 上海斗象信息科技有限公司 | Client terminal web page altering detecting method based on sound state separation template |
Non-Patent Citations (2)
| Title |
|---|
| LUO YUE-GUO 等: "The design and implementation of a real-time webpage Tamper-Proof technology", 《2011 INTERNATIONAL CONFERENCE ON MECHATRONIC SCIENCE, ELECTRIC ENGINEERING AND COMPUTER (MEC)》 * |
| 孔辉 等: "一种高性能的网页篡改检测与恢复机制", 《2010年全国通信安全学术会议论文集》 * |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2022252882A1 (en) * | 2021-06-02 | 2022-12-08 | Oppo广东移动通信有限公司 | Anti-hijacking method and apparatus for browser webpage, and electronic device and storage medium |
Also Published As
| Publication number | Publication date |
|---|---|
| CN108920589B (en) | 2021-08-10 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110362370B (en) | Webpage language switching method and device and terminal equipment | |
| CN107622135B (en) | Method and apparatus for displaying information | |
| US11113126B2 (en) | Verifying transfer of detected sensitive data | |
| CN108090351B (en) | Method and apparatus for processing request message | |
| US20140304839A1 (en) | Electronic clipboard protection | |
| WO2014154033A1 (en) | Method and apparatus for extracting web page content | |
| CN106569860A (en) | Application management method and terminal | |
| CN113568626B (en) | Dynamic packaging and application package opening method and device and electronic equipment | |
| CN110020358A (en) | Method and apparatus for generating dynamic page | |
| WO2023000952A1 (en) | Mailbox-based bill processing | |
| CN109857575A (en) | Interface call method, device, electronic equipment and storage medium | |
| CN111597107B (en) | Information output method and device and electronic equipment | |
| CN103617043B (en) | A kind of method and system uploaded with picture web data | |
| CN110970011A (en) | Picture processing method, device and equipment and computer readable storage medium | |
| CN113961836A (en) | Page jump method and device, electronic equipment and storage medium | |
| CN111400581B (en) | System, method and apparatus for labeling samples | |
| US9398041B2 (en) | Identifying stored vulnerabilities in a web service | |
| CN108920589A (en) | Browsing kidnaps recognition methods, device, server and storage medium | |
| CN104615385B (en) | A kind of data interactive method | |
| CN107862035A (en) | Network read method, device, Intelligent flat and the storage medium of minutes | |
| CN105512208B (en) | Information publishing method, device and system | |
| US20200007957A1 (en) | Wearable device, information processing method, apparatus and system | |
| CN113055348A (en) | Cross-platform data request method and device and electronic equipment | |
| US20190172263A1 (en) | Method and apparatus for augmenting reality | |
| CN116304403A (en) | Webpage access method and device, computer equipment and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |