CN115037792B

CN115037792B - Information acquisition method and device, electronic equipment and storage medium

Info

Publication number: CN115037792B
Application number: CN202210577896.4A
Authority: CN
Inventors: 陈静; 唐御钦; 许云森; 李文瑾
Original assignee: Nsfocus Technologies Inc; Nsfocus Technologies Group Co Ltd
Current assignee: Nsfocus Technologies Inc; Nsfocus Technologies Group Co Ltd
Priority date: 2022-05-25
Filing date: 2022-05-25
Publication date: 2023-05-12
Anticipated expiration: 2042-05-25
Also published as: CN115037792A

Abstract

The application discloses an information acquisition method, an information acquisition device, electronic equipment and a storage medium, which are used for improving the accuracy of information collection. In the embodiment of the application, first information input by a user is received, and at least one piece of second information is obtained by matching in a database based on the first information; determining target second information in response to a selection operation of the second information by a user; matching related information associated with the first information and the target second information based on the first information and the target second information; and then carrying out validity verification on the related information to obtain the verified related information and pushing the verified related information to a user. According to the information pushing method and device, the second information is matched according to the first information input by the user, the accuracy of the matched related information is improved based on the first information and the second information, and the validity of the related information is checked before the related information is pushed, so that the information pushed to the user is effective, and the accuracy of the information pushing is improved.

Description

Information acquisition method and device, electronic equipment and storage medium

Technical Field

The present disclosure relates to the field of data processing technologies, and in particular, to an information acquisition method, an information acquisition device, an electronic device, and a storage medium.

Background

With the development of penetration testing technology, information collection on target tissues becomes increasingly important. Comprehensive, rapid and careful information collection can better support the development of penetration test activities. In the related art, an open source data collection tool or a network space search engine is mostly adopted when information is collected. However, the emphasis points of different tools are different, the data updating frequencies of the different tools are inconsistent, and the data coverage range of each tool is limited, so that a single tool cannot meet the requirements.

Disclosure of Invention

The purpose of the application is to provide an information acquisition method, an information acquisition device, electronic equipment and a storage medium, which are used for improving the accuracy of information collection, distinguishing effective data and removing repeated data.

In a first aspect, an embodiment of the present application provides an information acquisition method, where the method includes:

receiving first information input by a user, and matching in a database based on the first information to obtain at least one piece of second information; wherein if the first information is a keyword, the second information is a domain name and a network interconnection protocol (Internet Protocol, IP) address, if the first information is a domain name, the second information is a keyword and an IP address, and if the first information is a keyword and a domain name, the second information is an IP address;

Determining target second information in response to a selection operation of the second information by the user;

matching, in a database, related information associated with the first information and the target second information based on the first information and the target second information; the related information characterizes the public information of the first information and the target second information in the database;

and carrying out validity verification on the related information by adopting a preset verification mode to obtain verified related information, and pushing the verified related information to the user.

In the embodiment of the application, the second information is matched according to the first information input by the user, and the accuracy of the matched related information is improved based on the first information and the second information, and the validity of the related information is checked before the related information is pushed, so that the information pushed to the user is effective information, and the accuracy of information pushing is improved.

In some possible embodiments, the matching in the database based on the first information to obtain at least one second information includes:

matching is carried out on the database based on the first information, and initial information is obtained;

Performing de-duplication operation on the initial information; filtering the initial information by adopting a preset blacklist to obtain filtered initial information;

and taking the filtered initial information as the second information.

In the application, when the second information is matched, the initial information obtained by matching is filtered, so that the second information obtained by matching is more accurate.

In some possible embodiments, before the validity check is performed on the related information by using a preset check manner, the method further includes:

classifying the related information according to preset categories to obtain at least one category set;

and determining a verification mode corresponding to the related information in the class set according to the corresponding relation between the preset class and the verification mode.

In the embodiment of the application, the verification mode corresponding to the related information is selected according to the category of the related information, so that the verification of the related information is more accurate.

In some possible embodiments, the pushing the verified related information to the user includes:

sending the verified related information to a target display screen for display;

The target display screen comprises a display area, and the display area is used for displaying the verified related information to a user.

In the embodiment of the application, the related information is displayed in the display area, so that a user can intuitively know the related information.

In some possible embodiments, the sending the verified related information to a target display screen for display includes:

dividing the display area of the target display screen into at least one sub-display area according to the number of the checked related information categories, wherein the number of the sub-display areas is the same as the number of the checked related information categories;

and displaying the verified related information of the same category in the same sub-display area according to the category of the verified related information, wherein one sub-display area displays the related information of one category.

In the embodiment of the application, the related information of the same category is displayed in the same sub-display area, so that a user can more intuitively know the related information.

In some possible embodiments, the category of the verified related information is determined according to the following method:

Determining the category of the verified related information according to the category set of the verified related information; or alternatively, the first and second heat exchangers may be,

and carrying out cluster analysis processing on the verified related information to obtain the category of the verified related information.

In the method, the category of the related information is determined through cluster analysis or according to the category set of the related information, and then the related information is verified according to the category of the related information, so that verification of the related information is more accurate.

In a second aspect, the present application further provides an information acquisition apparatus, including:

the receiving module is used for receiving first information input by a user and carrying out matching in the database based on the first information to obtain at least one piece of second information; the second information is a domain name and an IP address if the first information is a keyword, the second information is a keyword and an IP address if the first information is a domain name, and the second information is an IP address if the first information is a keyword and a domain name;

the determining module is used for determining target second information in response to the selection operation of the user on the second information;

a matching module, configured to match, in a database, related information associated with the first information and the target second information based on the first information and the target second information; the related information characterizes the public information of the first information and the target second information in the database;

And the pushing module is used for carrying out validity verification on the related information by adopting a preset verification mode to obtain verified related information and pushing the verified related information to the user.

In some possible embodiments, the matching module, when performing matching in the database based on the first information to obtain at least one second information, is configured to:

and taking the filtered initial information as the second information.

In some possible embodiments, before the pushing module performs validity verification on the related information by adopting a preset verification manner, the pushing module is further configured to:

In some possible embodiments, when the pushing module performs pushing the verified related information to the user, the pushing module is configured to:

In some possible embodiments, when the pushing module sends the verified related information to a target display screen for display, the pushing module is configured to:

In a third aspect, another embodiment of the present application also provides an electronic device, including at least one processor; and a memory communicatively coupled to the at least one processor; wherein the memory stores instructions executable by the at least one processor to enable the at least one processor to perform any one of the methods provided by the embodiments of the first aspect of the present application.

In a fourth aspect, another embodiment of the present application further provides a computer readable storage medium, where the computer readable storage medium stores a computer program for causing a computer to perform any one of the methods provided by the embodiments of the first aspect of the present application.

Additional features and advantages of the application will be set forth in the description which follows, and in part will be obvious from the description, or may be learned by practice of the application. The objectives and other advantages of the application will be realized and attained by the structure particularly pointed out in the written description and claims thereof as well as the appended drawings.

Drawings

In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings that are needed in the embodiments of the present application will be briefly described below, and it is obvious that the drawings that are described below are only some embodiments of the present application, and that other drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.

Fig. 1 is an application scenario schematic diagram of an information obtaining method provided in an embodiment of the present application;

fig. 2 is an overall flow chart of an information obtaining method according to an embodiment of the present application;

fig. 3 is a schematic flow chart of determining second information in an information obtaining method according to an embodiment of the present application;

fig. 4 is a schematic diagram of a display area of an information obtaining method according to an embodiment of the present application;

fig. 5 is a schematic diagram of a sub-display area of an information obtaining method according to an embodiment of the present application;

fig. 6 is a schematic diagram of unequal sub-display areas of an information obtaining method according to an embodiment of the present application;

fig. 7 is a schematic device diagram of an information obtaining method according to an embodiment of the present application;

fig. 8 is a schematic diagram of an electronic device according to an embodiment of the present application.

Detailed Description

For the purposes of making the objects, technical solutions and advantages of the present application more apparent, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present application, and it is apparent that the described embodiments are only some embodiments of the present application, but not all embodiments. All other embodiments, which can be made by one of ordinary skill in the art without undue burden from the present disclosure, are within the scope of the present disclosure. Embodiments and features of embodiments in this application may be combined with each other arbitrarily without conflict. Also, while a logical order of illustration is depicted in the flowchart, in some cases the steps shown or described may be performed in a different order than presented.

The terms first and second in the description and claims of the present application and in the above-described figures are used for distinguishing between different objects and not for describing a particular sequential order. Furthermore, the term "include" and any variations thereof is intended to cover non-exclusive protection. For example, a process, method, system, article, or apparatus that comprises a list of steps or elements is not limited to only those listed steps or elements but may include other steps or elements not listed or inherent to such process, method, article, or apparatus. The term "plurality" in the present application may mean at least two, for example, two, three or more, and embodiments of the present application are not limited.

The inventor researches and discovers that as penetration test technology is developed, information collection on target tissues becomes more important. Comprehensive, rapid and careful information collection can better support the development of penetration test activities. In the related art, an open source data collection tool or a network space search engine is mostly adopted when information is collected. However, the emphasis points of different tools are different, the data updating frequencies of different tools are inconsistent, and the data coverage range of each tool is limited, so that a single tool cannot meet the requirements, and if a plurality of tools are adopted, the problems that the data volume is large, effective data cannot be distinguished, data repetition cannot be achieved, and the like exist.

In view of the foregoing, the present application proposes an information acquisition method, apparatus, electronic device, and storage medium for solving the above-mentioned problems. The inventive concepts of the present application can be summarized as follows: receiving first information input by a user, and matching in a database based on the first information to obtain at least one piece of second information; determining target second information in response to a selection operation of the second information by a user; matching, in a database, related information associated with the first information and the target second information based on the first information and the target second information; and carrying out validity verification on the related information by adopting a preset verification mode to obtain verified related information, and pushing the verified related information to a user.

For easy understanding, a detailed description of an information acquisition method according to an embodiment of the present application is provided below with reference to the accompanying drawings.

Fig. 1 is an application scenario diagram of an information acquisition method in an embodiment of the present application. The drawings include: a server 10, a database 20, and a terminal device 30; wherein:

the server 10 receives first information input by a user in the terminal device 30, and matches in the database 20 based on the first information to obtain at least one second information; the first information is a keyword, the second information is a domain name and an IP address, the first information is a domain name, the second information is a keyword and an IP address, and the first information is a keyword and a domain name, the second information is an IP address; the server 10 determines target second information in response to a selection operation of the second information triggered by the user in the terminal device 30; matching, in the database 20, related information associated with the first information and the target second information based on the first information and the target second information; the relevant information characterizes public information of the first information and the target second information in the database 20; and carrying out validity verification on the related information by adopting a preset verification mode to obtain verified related information, and pushing the verified related information to a user.

In other embodiments, the operations performed by the server 10 may also be performed by the terminal device 30, and specific performing steps are the same as those of the server 10, which will not be described herein.

In the description herein, only a single server 10, database 20, terminal device 30 is described in detail, but it should be understood by those skilled in the art that the illustrated server 10, database 20, terminal device 30 are intended to represent the operation of the server 10, database 20, terminal device 30 in relation to the technical solutions of the present application. And not implying a limitation on the number, type, or location of servers 10, databases 20, terminal devices 30, etc. It should be noted that the underlying concepts of the example embodiments of the present application are not altered if additional modules are added to or individual modules are removed from the illustrated environment. In addition, it will be understood by those skilled in the art that the above-mentioned data transmission and reception needs to be implemented through a network.

It should be noted that, the database in the embodiment of the present application may be, for example, a cache system, or may also be a hard disk storage, a memory storage, or the like. In addition, the information acquisition method provided by the application is not only suitable for the application scene shown in fig. 1, but also suitable for any device with information acquisition requirements.

Fig. 2 is an overall flow chart of an information obtaining method according to an embodiment of the present application, where:

in step 201: receiving first information input by a user, and matching in a database based on the first information to obtain at least one piece of second information;

in step 202: determining target second information in response to a selection operation of the second information by a user;

in step 203: matching, in a database, related information associated with the first information and the target second information based on the first information and the target second information; the related information characterizes the public information of the first information and the target second information in the database;

in step 204: and carrying out validity verification on the related information by adopting a preset verification mode to obtain verified related information, and pushing the verified related information to a user.

For easy understanding, the information acquisition methods provided in the embodiments of the present application are described below:

1. matching the second information

In order to determine the accuracy and range of information acquisition in the present application, it is therefore necessary for the user to input first information and to match second information according to the first information input by the user. If the first information input by the user is a keyword, the second information is a domain name and an IP address, if the first information is a domain name, the second information is a keyword and an IP address, and if the first information is a keyword and a domain name, the second information is an IP address.

In some embodiments, in order to further ensure accuracy of the matched second information, if the input first information includes a keyword, the user may first perform fuzzy matching according to the keyword to obtain a target name, and use the target name as the keyword for matching the second information. For example: according to the keyword input by the user, the matching is achieved by adopting a third party application programming (Application Programming Interface, API) service mode, wherein the keyword is associated with: any one or combination of a target name, a target industry and commerce enterprise full name and a market enterprise stock name is recommended to a user, and the user selects one target keyword as the matching second information.

For example: and if the user selects the full name A as the full name of the business enterprise of the target name, the full name A is used as a keyword for matching the second information.

When at least one second information is obtained by matching in the database based on the first information, the steps shown in fig. 3 may be implemented:

In step 301: matching is carried out on the database based on the first information, and initial information is obtained;

in step 302: performing duplicate removal operation on the initial information; filtering the initial information by adopting a preset list to obtain filtered initial information;

in step 303: and taking the filtered initial information as second information.

For ease of understanding, the following examples are presented:

1. the first information is a keyword

Receiving keywords input by a user, and calling a search engine to match according to the keywords A to obtain an initial domain name: domain name 1, domain name 2, domain name 3, domain name 4, domain name 2; and an initial IP address: IP address 1, IP address 2, IP address 3, IP address 4; firstly, carrying out de-duplication operation on an initial domain name and an initial IP address to obtain a de-duplicated initial domain name: domain name 1, domain name 2, domain name 3, domain name 4, and the initial IP address after de-duplication: IP address 1, IP address 2, IP address 3, IP address 4; and then filtering the initial domain name and the initial IP address after the duplication removal by adopting a preset list, wherein the determination of the preset list comprises the following steps: IP address 2, IP address 8, IP address 12, domain name 4, domain name 6, domain name 7; the filtered initial domain name is obtained as: domain name 1, domain name 2, domain name 3, the initial IP address after filtering is: IP address 1, IP address 3, IP address 4; the domain name 1, the domain name 2, the domain name 3, the IP address 1, the IP address 3, and the IP address 4 constitute second information corresponding to the keyword a.

2. The first information is domain name

Receiving a domain name input by a user, and calling a search engine or a third party interface to match according to the domain name 1 to obtain an initial keyword: keyword 1, keyword 2, keyword 3, keyword 4; and an initial IP address: IP address 1, IP address 2, IP address 3, IP address 4; firstly, performing duplication removal operation on an initial keyword and an initial IP address to obtain a duplicated initial keyword: keyword 1, keyword 2, keyword 3, keyword 4, and the initial IP address after deduplication: IP address 1, IP address 2, IP address 3, IP address 4; and then filtering the initial keywords and the initial IP addresses after the duplication removal by adopting a preset list, wherein the determination of the preset list comprises the following steps: keyword 2, keyword 4, IP address 2, IP address 8; the filtered initial keywords are obtained as follows: keyword 1 and keyword 3, and the initial IP address after filtering is: IP address 1, IP address 3, IP address 4; the keyword 1, the keyword 3, the IP address 1, the IP address 3, and the IP address 4 constitute second information corresponding to the domain name 1.

3. The first information is keywords and domain names

Receiving keywords and domain names input by users, and calling a search engine or a third party interface to match according to the keywords 1 and the domain names 1 to obtain initial IP addresses: IP address 1, IP address 2, IP address 3, IP address 4; firstly, carrying out de-duplication operation on an initial IP address to obtain a de-duplicated initial IP address: IP address 1, IP address 2, IP address 3, IP address 4; and then filtering the initial IP address after the duplication removal by adopting a preset list, wherein the determination of the preset list comprises the following steps: keyword 2, keyword 4, IP address 2, IP address 8; the filtered initial IP address is obtained as: IP address 1, IP address 3, IP address 4; the IP address 1, the IP address 3, and the IP address 4 constitute second information corresponding to the keyword 1 and the domain name 1.

In some embodiments, in order to ensure the accuracy of the relevant information obtained by the final matching, it is necessary for the user to select the target second information from the obtained second information and match the relevant information according to the target second information and the first information. In some embodiments, if the user does not consider the accuracy of the related information but obtains as much related information as possible, the second information obtained by matching the first information may be used as the target second information, that is, the user does not need to select the target second information, and the related information may be directly matched with the first information input by the user according to the second information obtained by matching.

2. Acquiring related information

For ease of understanding, the types of information acquisition in the present application will be described first, and in the embodiment of the present application, the types of information acquisition include, but are not limited to, the types in table 1:

TABLE 1

In this application, the information acquisition of the above category may be performed according to the first information of the user and the second information of the target, and the data sources when the information acquisition is performed mainly include: third party APIs, traditional search engines, web space search engines. The method and the device do not limit the types and the number of the data sources, and the obtained data are guaranteed to be comprehensive due to the fact that the number of the data sources is large. And the number of third party API data sources is not limited in this application. Technicians can add new data sources at any time according to requirements; the data source response speed is high, so that the information acquisition efficiency is guaranteed. The following is illustrative:

1. Sub domain name information acquisition

And calling a plurality of subdomain information acquisition sources according to the domain name in the first information or the second information to obtain subdomain name information.

For example: the user inputs a keyword 1, and the target second information is a domain name 2 and an IP address 4, and then a plurality of sub domain name information acquisition sources are called according to the domain name 3 to obtain sub domain names: domain name 201, domain name 211, domain name 212, etc.

2. IP information acquisition

And calling a plurality of sub domain name information acquisition sources according to the domain names in the first information or the second information to obtain sub domain name information, and obtaining the IP corresponding to each sub domain name by using servers deployed in different regions as access outlets and adopting an Internet packet explorer (Packet Internet Groper, ping) mode according to each sub domain name.

And calling a third party API according to the IP corresponding to each subdomain name and the IP in the second information to obtain the corresponding information of each IP. Wherein the IP-corresponding information includes, but is not limited to: the country to which the IP belongs, the city to which the IP belongs, latitude and longitude information, a service provider, an open port number, open port response information, an open port protocol type, identification time, and the like.

3. GIThub information acquisition

And calling a GIThub search engine according to the first information, the target second information and the preset code leakage keywords input by the user to obtain the GIThub information.

4. Supply chain information acquisition

According to the keyword in the first information or the target second information, calling a third party API interface to obtain supply chain information associated with the keyword, wherein the supply chain information comprises but is not limited to: the bidding supplier industry and commerce enterprise full scale, the winning bid report content, winning bid purchase content, purchase amount, report date and operation range of the enterprise.

5. Public number information acquisition

And calling a search engine according to the keywords in the first information or the target second information to obtain a public number associated with the keywords, and the name, the authentication subject and the like of the public number.

3. Processing and deduplication of related information

Since the information acquisition method provided by the application acquires data from a plurality of data sources, there is a case where data is repeated, and for this case, in order to ensure the uniqueness of the related information, a deduplication operation is required for the related information.

The method for performing the de-duplication operation is not limited, and the method for performing the de-duplication operation is applicable to the application.

4. Data classification

In the embodiment of the application, after the related information is obtained through the method, if the related information is directly displayed to the user, the user can automatically verify the validity of the related information, and huge burden is brought to the user. Therefore, in the embodiment of the application, before the related information is displayed, the category of the related information is determined according to different categories of the related information, and different validity verification modes corresponding to the different categories are provided. In the application, the related information is classified according to preset categories to obtain at least one category set; and determining a verification mode corresponding to the related information in the class set according to the corresponding relation between the preset class and the verification mode.

In the application, the acquired IP information is accessed in a mode of simulating the access of the browser, and the validity of the IP information is determined according to the returned state code; the acquired subdomain name information is accessed by imitating the access mode of a browser, and the validity of the subdomain name information is determined according to the returned state code; for the collected mailbox information, mailbox reachability verification is carried out, and the validity of the mailbox information is determined according to the returned status code; and giving an application market download address of the mobile application to the acquired mobile application information, thereby determining the validity of the mobile application information.

For ease of understanding, the following examples are presented:

1. IP information validity verification

And selecting ports with the open port protocol types of http and https for the acquired IP information, and performing IP address splicing as input. For example: the IP address is 117.107.147.163, the open port has 8080, and the open port protocol is https. Then the splice address is: https://117.107.147.163:8080 as input; accessing the spliced address by adopting a non-interface browser state (heasless) and simulating the access mode of the browser by using a command line mode; and determining the validity of the IP information according to the returned HTTP status code. Wherein the status code consists of 3 digits and a reason phrase. For example: 1XX represents: an informative status code, the accepted request being processed; 2XX represents: successful status code, the request is processed normally; 3XX represents: redirecting, requiring additional operations to complete the request; 4XX represents: client error, server can't process request; 5XX represents: server errors, server processing request errors.

2. Validity verification of a leakage mailbox

Filtering the obtained leakage mailbox, removing the public mailbox, and obtaining the postfix of the rest mailbox, for example, the mailbox is: xxxx@nsfocus.com; the suffix is nsfocus. A mail exchange (MX) server that queries for domain name addresses, e.g., MX server address of nsfocus.com is mgw.nsfocus.com; if the MX server address of the domain name is not inquired, the address of the leaked mailbox is invalid; after inquiring the address of the MX server, the MX server communicates with the MX server to initiate an originating request, the MX server gives out the return information of whether the mailbox address exists or not, and whether the mailbox address is effective or not is judged according to the return information.

3. Mobile application validity verification

And inquiring in a third party database according to the name of the mobile application, and if the third party database returns a download link, determining that the mobile application is valid.

4. Public number validity verification

And calling a network search engine according to the name of the public number, and if the network search engine returns the two-dimensional code of the public number, determining that the public number is effective.

5. Data presentation

When the verified related information is pushed to the user, the verified related information can be displayed in a target display screen, wherein the target display screen comprises a display area, and the display area is used for displaying the verified related information to the user.

When the related information is displayed, firstly dividing the display area of the target display screen into at least one sub-display area according to the number of the checked related information categories, wherein the number of the sub-display areas is the same as the number of the checked related information categories; and displaying the verified related information of the same category in the same sub-display area according to the category of the verified related information, wherein one sub-display area displays the related information of one category.

Wherein the category of the related information is determined according to the following method: determining the category of the verified related information according to the category set of the verified related information; or, carrying out cluster analysis processing on the verified related information to obtain the category of the verified related information.

For example: as shown in fig. 4, if the number 4 of categories of related information is determined, the display area of the target display screen is divided into 4 sub-display areas, each of which displays related information of one category.

In the specific implementation, the size of the sub-display area is not limited, and may be equal to that of each sub-display area as shown in fig. 5, or may be adaptively adjusted according to the amount of related information as shown in fig. 6, and the specific setting direction of the display area is not limited, and may be longitudinally arranged, laterally arranged, or may be set according to the requirement.

As shown in fig. 7, based on the same inventive concept, an information acquisition apparatus 700 is provided, including:

the receiving module 7001 is configured to receive first information input by a user, and match the first information in a database to obtain at least one second information; the second information is a domain name and an IP address if the first information is a keyword, the second information is a keyword and an IP address if the first information is a domain name, and the second information is an IP address if the first information is a keyword and a domain name;

a determining module 7002, configured to determine target second information in response to a selection operation of the second information by the user;

a matching module 7003, configured to match, in a database, related information associated with the first information and the target second information based on the first information and the target second information; the related information characterizes the public information of the first information and the target second information in the database;

and the pushing module 7004 is configured to perform validity verification on the related information by using a preset verification manner, obtain verified related information, and push the verified related information to the user.

and taking the filtered initial information as the second information.

Having described the information acquisition method and apparatus of the exemplary embodiments of the present application, next, an electronic device according to another exemplary embodiment of the present application is described.

Those skilled in the art will appreciate that the various aspects of the present application may be implemented as a system, method, or program product. Accordingly, aspects of the present application may be embodied in the following forms, namely: an entirely hardware embodiment, an entirely software embodiment (including firmware, micro-code, etc.) or an embodiment combining hardware and software aspects may be referred to herein as a "circuit," module "or" system.

In some possible implementations, an electronic device according to the present application may include at least one processor, and at least one memory. Wherein the memory stores program code that, when executed by the processor, causes the processor to perform the steps in the information acquisition method according to various exemplary embodiments of the present application described above in the present specification.

An electronic device 130 according to this embodiment of the present application is described below with reference to fig. 8. The electronic device 130 shown in fig. 8 is merely an example and should not be construed to limit the functionality and scope of use of embodiments of the present application in any way.

As shown in fig. 8, the electronic device 130 is in the form of a general-purpose electronic device. Components of electronic device 130 may include, but are not limited to: the at least one processor 131, the at least one memory 132, and a bus 133 connecting the various system components, including the memory 132 and the processor 131.

Bus 133 represents one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, a processor, and a local bus using any of a variety of bus architectures.

Memory 132 may include readable media in the form of volatile memory such as Random Access Memory (RAM) 1321 and/or cache memory 1322, and may further include Read Only Memory (ROM) 1323.

Memory 132 may also include a program/utility 1325 having a set (at least one) of program modules 1324, such program modules 1324 include, but are not limited to: an operating system, one or more application programs, other program modules, and program data, each or some combination of which may include an implementation of a network environment.

The electronic device 130 may also communicate with one or more external devices 134 (e.g., keyboard, pointing device, etc.), one or more devices that enable a user to interact with the electronic device 130, and/or any device (e.g., router, modem, etc.) that enables the electronic device 130 to communicate with one or more other electronic devices. Such communication may occur through an input/output (I/O) interface 135. Also, electronic device 130 may communicate with one or more networks such as a Local Area Network (LAN), a Wide Area Network (WAN), and/or a public network, such as the Internet, through network adapter 136. As shown, network adapter 136 communicates with other modules for electronic device 130 over bus 133. It should be appreciated that although not shown in fig. 8, other hardware and/or software modules may be used in connection with electronic device 130, including, but not limited to: microcode, device drivers, redundant processors, external disk drive arrays, RAID systems, tape drives, data backup storage systems, and the like.

In some possible embodiments, aspects of an information acquisition method provided herein may also be implemented in the form of a program product comprising program code for causing a computer device to carry out the steps of an information acquisition method according to various exemplary embodiments of the present application as described herein above, when the program product is run on the computer device.

The program product may employ any combination of one or more readable media. The readable medium may be a readable signal medium or a readable storage medium. The readable storage medium can be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or a combination of any of the foregoing. More specific examples (a non-exhaustive list) of the readable storage medium would include the following: an electrical connection having one or more wires, a portable disk, a hard disk, random Access Memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

The program product for information retrieval of embodiments of the present application may employ a portable compact disc read only memory (CD-ROM) and include program code and may be run on an electronic device. However, the program product of the present application is not limited thereto, and in this document, a readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device.

The readable signal medium may include a data signal propagated in baseband or as part of a carrier wave with readable program code embodied therein. Such a propagated data signal may take any of a variety of forms, including, but not limited to, electro-magnetic, optical, or any suitable combination of the foregoing. A readable signal medium may also be any readable medium that is not a readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device.

Program code embodied on a readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.

Program code for carrying out operations of the present application may be written in any combination of one or more programming languages, including an object oriented programming language such as Java, C++ or the like and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code may execute entirely on the consumer electronic device, partly on the consumer electronic device, as a stand-alone software package, partly on the consumer electronic device, partly on the remote electronic device, or entirely on the remote electronic device or server. In the case of remote electronic devices, the remote electronic device may be connected to the consumer electronic device through any kind of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or may be connected to an external electronic device (e.g., connected through the internet using an internet service provider).

It should be noted that although several units or sub-units of the apparatus are mentioned in the above detailed description, such a division is merely exemplary and not mandatory. Indeed, the features and functions of two or more of the elements described above may be embodied in one element in accordance with embodiments of the present application. Conversely, the features and functions of one unit described above may be further divided into a plurality of units to be embodied.

Furthermore, although the operations of the methods of the present application are depicted in the drawings in a particular order, this is not required to or suggested that these operations must be performed in this particular order or that all of the illustrated operations must be performed in order to achieve desirable results. Additionally or alternatively, certain steps may be omitted, multiple steps combined into one step to perform, and/or one step decomposed into multiple steps to perform.

It will be appreciated by those skilled in the art that embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.

The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems) and computer program products according to the application. It will be understood that each flow and/or block of the flowchart illustrations and/or block diagrams, and combinations of flows and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.

These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

It will be apparent to those skilled in the art that various modifications and variations can be made in the present application without departing from the spirit or scope of the application. Thus, if such modifications and variations of the present application fall within the scope of the claims and the equivalents thereof, the present application is intended to cover such modifications and variations.

Claims

1. An information acquisition method, the method comprising:

receiving first information input by a user, and matching in a database based on the first information to obtain at least one piece of second information; the second information is a domain name and an Internet Protocol (IP) address if the first information is a keyword, the second information is a keyword and an IP address if the first information is a domain name, and the second information is an IP address if the first information is a keyword and a domain name;

2. The method of claim 1, wherein said matching in the database based on the first information results in at least one second information, comprising:

performing de-duplication operation on the initial information; filtering the initial information by adopting a preset list to obtain filtered initial information;

and taking the filtered initial information as the second information.

3. The method of claim 1, wherein before the validity check is performed on the related information by using a preset check method, the method further comprises:

4. A method according to claim 3, wherein said pushing said verified related information to said user comprises:

5. The method of claim 4, wherein the sending the verified related information to a target display screen for display comprises:

6. The method according to any of claims 3-5, wherein the category of the verified related information is determined according to the following method:

7. An information acquisition apparatus, characterized in that the apparatus comprises:

8. The apparatus of claim 7, wherein the matching module, when performing matching in a database based on the first information to obtain at least one second information, is configured to:

and taking the filtered initial information as the second information.

9. An electronic device comprising at least one processor; and a memory communicatively coupled to the at least one processor; wherein the memory stores instructions executable by the at least one processor to implement the method of any one of claims 1 to 6.

10. A computer storage medium, characterized in that the computer storage medium stores a computer program for enabling a computer to perform the method according to any one of claims 1-6.