CN104679798B - Page detection method and device - Google Patents
Page detection method and device Download PDFInfo
- Publication number
- CN104679798B CN104679798B CN201310643263.XA CN201310643263A CN104679798B CN 104679798 B CN104679798 B CN 104679798B CN 201310643263 A CN201310643263 A CN 201310643263A CN 104679798 B CN104679798 B CN 104679798B
- Authority
- CN
- China
- Prior art keywords
- network address
- detected
- page status
- page
- redirects
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000001514 detection method Methods 0.000 title claims abstract description 83
- 238000000034 method Methods 0.000 claims abstract description 18
- 230000009286 beneficial effect Effects 0.000 abstract description 11
- 238000010586 diagram Methods 0.000 description 12
- 238000005516 engineering process Methods 0.000 description 5
- 230000000644 propagated effect Effects 0.000 description 3
- 238000010276 construction Methods 0.000 description 2
- 230000001953 sensory effect Effects 0.000 description 2
- 210000003739 neck Anatomy 0.000 description 1
- 239000002699 waste material Substances 0.000 description 1
Landscapes
- Information Transfer Between Computers (AREA)
Abstract
The present invention discloses a kind of page detection method and device, and when the embodiment of the present invention receives the instruction of the detection to a certain network address of client triggering, match the network address to be detected redirects relation, searches whether to be stored with the purpose network address after the network address to be detected redirects；If being stored with the purpose network address, inquire about and obtain the page status of the purpose network address；If not storing the purpose network address, inquire about and obtain the page status of the network address to be detected；Compared to the page status of each network address to be detected in the prior art, is directly detected, the embodiment of the present invention is had the beneficial effect for quickly detecting the malice network address for being evaded strike using redirecting technique, has saved network bandwidth and cpu resource.
Description
Technical field
The present invention relates to Internet technology, more particularly to a kind of page detection method and device.
Background technology
As the fast development of Internet technology, network security problem are increasingly important.At present, when user accesses internet,
Server-side generally use security service software（Such as Tencent computer house keeper）To detect the security for the webpage that user is accessed；If clothes
Be engaged in certain web page address, that is, URL that device detection user accesses（Uniform Resource Locator, universal resource locator）For
Malicious websites, then return to this testing result to client, and prompts user to access with caution.When a certain bar malice URL is admitted to
After cloud security service device database, hacker would generally propagate other not yet intercepted malice by the way of network address redirection
URL；For example by way of adding random number after a certain URL link, numerous different URL can be constructed, whenever wherein
After one is intercepted by cloud security software, directly propagated using another.
For the above-mentioned malice network address for evading Cloud Server strike using redirecting technique, existing website safety detection
Mode is still that wall scroll URL is detected respectively, is the URL of same network address for jump address, when server detects, it is necessary to
The corresponding content of pages of the above-mentioned URL of repeated downloads, and carry out replicate analysis to carry out safety detection, waste substantial amounts of bandwidth and
Cpu resource, is unfavorable for fast and effeciently detecting malicious websites.
The content of the invention
In consideration of it, it is necessary to provide a kind of page detection method and device, timely and effectively to detect to utilize redirection
Technology evades the malice network address of strike.
The embodiment of the invention discloses a kind of page detection method, comprise the following steps：
When receiving the instruction of the detection to a certain network address of client triggering, match the network address to be detected redirects relation,
Search whether to be stored with the purpose network address after the network address to be detected redirects；
If finding the purpose network address, inquire about and obtain the page status of the purpose network address；
If not finding the purpose network address, inquire about and obtain the page status of the network address to be detected.
A kind of webpage detection device is also disclosed in the embodiment of the present invention, including：
Matching module, when the detection to a certain network address for receiving client triggering instructs, matches the survey grid to be checked
Location redirects relation, searches whether to be stored with the purpose network address after the network address to be detected redirects；
Enquiry module, for when finding the purpose network address, inquiring about and obtaining the page status of the purpose network address；
When not finding the purpose network address, inquire about and obtain the page status of the network address to be detected.
When the embodiment of the present invention receives the instruction of the detection to a certain network address of client triggering, the network address to be detected is matched
Redirect relation, search whether to be stored with the purpose network address after the network address to be detected redirects；If being stored with the purpose network address,
Then inquire about and obtain the page status of the purpose network address；If not storing the purpose network address, inquire about and obtain described treat
Detect the page status of network address；Compared in the prior art, directly detecting the page status of each network address to be detected, the present invention
Embodiment has the beneficial effect for quickly detecting the malice network address for evading strike using redirecting technique, has saved network bandwidth
And cpu resource.
Brief description of the drawings
Fig. 1 is page detection method first embodiment flow diagram of the present invention；
Fig. 2 is page detection method second embodiment flow diagram of the present invention；
Fig. 3 is in page detection method of the present invention, inquires about and obtains the one embodiment flow of page status of network address to be detected
Schematic diagram；
Fig. 4 is webpage detection device first embodiment high-level schematic functional block diagram of the present invention；
Fig. 5 is webpage detection device second embodiment high-level schematic functional block diagram of the present invention；
Fig. 6 is webpage detection device 3rd embodiment high-level schematic functional block diagram of the present invention.
Realization, functional characteristics and the advantage of purpose of the embodiment of the present invention will be done furtherly referring to the drawings in conjunction with the embodiments
It is bright.
Embodiment
Technical scheme is further illustrated below in conjunction with Figure of description and specific embodiment.It should be appreciated that this
Locate described specific embodiment only to explain the present invention, be not intended to limit the present invention.
Fig. 1 is page detection method first embodiment flow diagram of the present invention；As shown in Figure 1, webpage detection of the present invention
Method comprises the following steps：
When step S01, receiving the instruction of the detection to a certain network address of client triggering, the jump of the network address to be detected is matched
Transfer the registration of Party membership, etc. from one unit to another, search whether to be stored with the purpose network address after the network address to be detected redirects；If finding the purpose network address, hold
Row step S02；If not finding the purpose network address, step S03 is performed；
In the embodiment of the present invention, server-side is stored with the URL security information databases of magnanimity, is stored in the database
URL addresses and the corresponding state in URL addresses, and the above- mentioned information of the server-side real-time update database purchase；Such as change
Certain corresponding state in URL addresses, the URL for adding malice network address, add the corresponding network address for redirecting relation and the URL mesh of certain URL
Page status etc..
When operation of the client based on user side, the safe condition of a certain network address network address URL a for example to be detected is asked；Or
Person, client trigger server-side detection URL states trigger condition when, server-side receive client triggering to the URL
The detection instruction of a, matches the relation that redirects of the URL a, the purpose net after the URL a are redirected whether is stored with searching data storehouse
Location such as URL b.
In the embodiment of the present invention, the trigger condition of the server-side detection URL states of client triggering can be：Client's end group
In the URL addresses, the access of the triggering corresponding page in URL addresses；Alternatively, client clicks on word or word after interior chain
Deng the embodiment of the present invention does not limit above-mentioned trigger condition.
Step S02, inquiry and the page status of the purpose network address is obtained；
Step S03, inquiry and the page status of the network address to be detected is obtained.
If server side searches are stored with the purpose network address URL b after the URL a are redirected into the database of the server-side,
Server-side directly acquires the page status of the destination address URL b after the URL a are redirected；If server-side does not have in its database
The purpose network address URLb after the network address URL a to be detected are redirected is found, then server-side inquires about and obtains the network address URL to be detected
The page status of a.
Page detection method of the embodiment of the present invention is directed to the detection result for the malice network address that technical construction is redirected using network address,
It is especially pronounced.The network address redirects, and also known as network address redirects, and refers to when user inputs network address A and accesses, browser meeting
Network address B is automatic jumped to, the content of network address B is shown to user.For example link http://t.cn/hfwpF111 and http://
t.cn/hfwpF222 and http://t.cn/hfwpF333, all jump to http://qq.com；By after t.cn is linked
The mode of random number is added in face, numerous different URL can be constructed, whenever one of URL is by positioned at Yunan County of server-side
After full software intercepts, hacker is directly propagated using another URL.
Using the thought of page detection method of the embodiment of the present invention, when server-side receives a network address URL a to be detected
When, the relation that redirects of the URL a is matched first, and the purpose network address URL after the URL a are redirected whether is stored with searching data storehouse
b；If the purpose network address URL b being stored with after the URL a are redirected, inquire about the page status of the URL b, and obtain being somebody's turn to do for storage
The page status of URL b, the page status as the network address URL a to be detected.Such as the network address to be detected that server-side receives
For above-mentioned network address http://t.cn/hfwpF111, server-side matches the http://t.cn/hfwpF111 redirect pass
System, finds out and the http is stored with database://t.cn/hfwpF111 network address redirect after purpose network address http://
Qq.com, and inquire about and obtain purpose network address http:The corresponding page status of //qq.com is safety, then server-side is got
Network address http to be detected://t.cn/hfwpF111 page status is safety；Similarly, server-side is received to http://
t.cn/hfwpFDuring 222 detection, according to above-mentioned thought, match the network address redirects relation, gets the http://t.cn/
hfwpFThe corresponding purpose network address http in 222 addresses://qq.com, and inquire about and obtain purpose network address http://qq.com
Page status for safety.Further, in the embodiment of the present invention, match network address to be detected redirects relation, identifies that this is to be checked
The purpose network address that survey grid location whether there is after redirecting is the http by downloading the network address to be detected（Hyper Text
Transport Protocol, hypertext transfer protocol）What head was realized.
When the embodiment of the present invention receives the instruction of the detection to a certain network address of client triggering, the network address to be detected is matched
Redirect relation, search whether to be stored with the purpose network address after the network address to be detected redirects；If being stored with the purpose network address,
Then inquire about and obtain the page status of the purpose network address；If not storing the purpose network address, inquire about and obtain described treat
Detect the page status of network address；Compared in the prior art, directly detecting the page status of each network address to be detected, the present invention
Embodiment has the beneficial effect for quickly detecting the malice network address for evading strike using redirecting technique, has saved network bandwidth
And cpu resource.
Fig. 2 is page detection method second embodiment flow diagram of the present invention；The present embodiment and embodiment described in Fig. 1
Difference is, the present embodiment describes that after server-side gets page status, the page status obtained is returned to client.
Based on the specific descriptions of embodiment described in Fig. 1, as shown in Fig. 2, page detection method of the present invention " step S02, is being looked into
Ask and obtain the page status of the purpose network address " alternatively, " step S03, inquiry and obtaining the page shape of the network address to be detected
After state ", further include：
Step S04, the page status of the purpose network address of acquisition or network address to be detected is back to client.
In the embodiment of the present invention, the page status of the purpose network address of acquisition or network address to be detected is back to visitor by server-side
Family end includes：The various page status of the purpose network address of acquisition or network address to be detected are back to client by server-side, no
The page status is managed as secure page table or the dangerous page.
In the preferred embodiment of the present invention, server-side is only by the page of the purpose network address got or network address to be detected
When surface state is the dangerous page, corresponding above-mentioned page status is just back to client, while remind client to the webpage
Accessed with caution.
In view of the sensory experience of client user, server-side can be only by the purpose network address of acquisition or network address to be detected
Page status be that the situation of the dangerous page is back to client, to remind client to access the webpage with caution；For
The purpose network address of acquisition or the situation that the page status of network address to be detected is secure page table, server-side can directly acquire the net
The corresponding page in location, and the page of acquisition is directly pushed into client.
The page status of the purpose network address of acquisition or network address to be detected is back to client by server-side of the embodiment of the present invention
End, has the beneficial effect for reminding the client page status to be accessed；Especially when the page status of acquisition is dangerous page
During face, also have and improve the beneficial effect that client accesses internet security.
Fig. 3 is in page detection method of the present invention, inquires about and obtains the one embodiment flow of page status of network address to be detected
Schematic diagram；The difference of the embodiment of the present invention and Fig. 1, Fig. 2 embodiment is that the embodiment of the present invention only describes：Server-side is not searched
During purpose network address after being redirected to network address to be detected, inquire about and obtain the page status of network address to be detected.
Based on the description of embodiment described in Fig. 1, Fig. 2, as shown in figure 3, in page detection method of the present invention, step S03, look into
Ask and obtain the page status of network address to be detected, including：
Step S31, whether inquiry is stored with the page status of the network address to be detected；If it is stored with the network address to be detected
Page status, then perform step S32；If not storing the page status of the network address to be detected, step S33 is performed；
Step S32, the page status of the network address to be detected of storage is obtained；
Step S33, detect the network address to be detected redirects relation；According to result of detection, detect and obtain described to be checked
The page status of survey grid location.
In the present embodiment, when server-side receives the instruction of the detection to a certain network address of client triggering, matching first should
Network address to be detected redirects relation, and the purpose network address after the network address to be detected redirects whether is stored with searching data storehouse.
When server-side does not find the purpose network address after network address to be detected redirects, whether it is stored with searching data storehouse
The corresponding page status of the network address to be detected；If being stored with the page status of the network address to be detected, server-side obtains storage
The page status of the network address to be detected.If not storing the page status of the network address to be detected, treated described in server-side detection
Detection network address redirects relation；According to result of detection, detect and obtain the page status of the network address to be detected.
The network address to be detected is being detected there are during purpose network address, server-side downloads the mesh after the network address to be detected redirects
The corresponding content of pages of network address, analyze the content of pages of the purpose network address of download, obtain the page status of the purpose network address；
Page status using the page status of the purpose network address of acquisition as the network address to be detected.It is described to be detected detecting
When purpose network address is not present in network address, server-side directly downloads the corresponding content of pages of the network address to be detected, and analyze download should
The content of pages of network address to be detected, obtains the page status of the network address to be detected.
Further, in the present embodiment, server-side detection network address to be detected redirects relation, identifies that the network address to be detected is
The no purpose network address existed after redirecting is realized by downloading the http heads of network address to be detected；Server-side is according to the to be checked of download
Information during survey grid location is http corresponding, can recognize that the network address to be detected whether there is the purpose network address after redirecting；This
Be because including the information of the purpose network address after the network address to be detected redirects in the http heads of network address to be detected, the information with
The form of plaintext exists, according to the information in http, after can obviously showing whether the network address to be detected redirects
Purpose network address.
For example server-side obtains a network address http to be detected://t.cn/hfwpFThe information of 111 http heads includes：
HTTP/1.1302Moved Temporarily
Location:http://qq.com
According to the corresponding http headers of the network address to be detected, the network address http to be detected can be obtained://t.cn/
hfwpF111 redirect after purpose network address be http://qq.com.
For the ease of the convenience of subsequent detection network address, the embodiment of the present invention further updates corresponding database, will examine
The page status for the network address not yet stored measured is stored into database；Meanwhile there is the purpose net after redirecting in the network address
During location, what server-side stored the purpose network address after the network address redirects and the network address redirects relation, and the network address redirects rear purpose net
The page status of location.
When N number of different URL is redirected to same purpose URL, using existing network address detection method, it is necessary to this mesh
The corresponding pagefiles of URL download n times respectively, and this n times is downloaded due to being carried out for purpose URL, this N
Secondary is repeated downloads.And based on the above-mentioned thought of network address detection method of the embodiment of the present invention, server-side then only needs to download n times
Http and a purpose URL corresponding page file.Compared to the pagefile size of download, server-side downloads http
Expense can be ignored substantially.
When the inquiry of server-side of the embodiment of the present invention does not store the page status of network address to be detected, the jump of network address to be detected is detected
Transfer the registration of Party membership, etc. from one unit to another；According to result of detection, detect and obtain the page status of network address to be detected；Opening when reducing server-side detection network address
Pin, has the beneficial effect for further saving network bandwidth and cpu resource.
Fig. 4 is webpage detection device first embodiment high-level schematic functional block diagram of the present invention；As shown in figure 4, webpage of the present invention
Detection device includes：Matching module 01 and enquiry module 02.
Matching module 01, when the detection to a certain network address for receiving client triggering instructs, it is to be detected to match this
Network address redirects relation, searches whether to be stored with the purpose network address after the network address to be detected redirects；
In the embodiment of the present invention, server-side is stored with the URL security information databases of magnanimity, is stored in the database
URL addresses and the corresponding state in URL addresses, and the above- mentioned information of the server-side real-time update database purchase；Such as change
Certain corresponding state in URL addresses, the URL for adding malice network address, add the corresponding network address for redirecting relation and the URL mesh of certain URL
Page status etc..
When operation of the client based on user side, the safe condition of a certain network address network address URL a for example to be detected is asked；Or
Person, client trigger server-side detection URL states trigger condition when, matching module 01 receive client triggering to this
The detection instruction of URL a, matches the relation that redirects of the URL a, the mesh after the URL a are redirected whether is stored with searching data storehouse
Network address such as URL b.
In the embodiment of the present invention, the trigger condition of the server-side detection URL states of client triggering can be：Client's end group
In the URL addresses, the access of the triggering corresponding page in URL addresses；Alternatively, client clicks on word or word after interior chain
Deng the embodiment of the present invention does not limit above-mentioned trigger condition.
Enquiry module 02, for when finding the purpose network address, inquiring about and obtaining the page shape of the purpose network address
State；When not finding the purpose network address, inquire about and obtain the page status of the network address to be detected.
If enquiry module 02, which is found, is stored with the purpose network address URL after the URL a are redirected in the database of the server-side
B, then enquiry module 02 directly acquire the page status of the destination address URL b after the URL a are redirected；If enquiry module 02 is at it
The purpose network address URL b after the network address URL a to be detected are redirected are not found in database, then enquiry module 02 is inquired about and obtained
Take the page status of the network address URL a to be detected.
The detection of webpage of embodiment of the present invention detection device redirects the beneficial effect of the malice network address of technical construction using network address,
It is especially pronounced.The network address redirects, and also known as network address redirects, and refers to when user inputs network address A and accesses, browser meeting
Network address B is automatic jumped to, the content of network address B is shown to user.For example link http://t.cn/hfwpF111 and http://
t.cn/hfwpF222 and http://t.cn/hfwpF333, all jump to http://qq.com；By after t.cn is linked
The mode of random number is added in face, numerous different URL can be constructed, whenever one of URL is by positioned at Yunan County of server-side
After full software intercepts, hacker is directly propagated using another URL.
Using the thought of webpage detection device of the embodiment of the present invention, when server-side receives a network address URL a to be detected
When, whether matching module 01 matches the relation that redirects of the URL a first, be stored with searching data storehouse after the URL a redirect
Purpose network address URL b；If the purpose network address URL b being stored with after the URL a are redirected, enquiry module 02 inquires about the URL b's
Page status, and the page status of the URL b of storage is obtained, the page status as the network address URL a to be detected.Such as
The network address to be detected that server-side receives is above-mentioned network address http://t.cn/hfwpF111, the matching of matching module 01 should
http://t.cn/hfwpF111 redirect relation, find out the http is stored with database://t.cn/hfwpF111 nets
Location redirect after purpose network address http://qq.com, enquiry module 02 are inquired about and obtain purpose network address http://qq.com pairs
The page status answered is safety, then enquiry module 02 gets network address http to be detected://t.cn/hfwpF111 page shape
State is safety；Similarly, server-side is received to http://t.cn/hfwpFDuring 222 detection, according to above-mentioned thought, matching
The matching of module 01 network address redirects relation, gets the http://t.cn/hfwpFThe corresponding purpose network address in 222 addresses
http://qq.com, and enquiry module 02 is inquired about and obtains purpose network address http:The page status of //qq.com is safety.
Further, in the embodiment of the present invention, what matching module 01 matched network address to be detected redirects relation, identifies that the network address to be detected is
The no purpose network address existed after redirecting is realized by downloading the http heads of the network address to be detected.
When the embodiment of the present invention receives the instruction of the detection to a certain network address of client triggering, the network address to be detected is matched
Redirect relation, search whether to be stored with the purpose network address after the network address to be detected redirects；If being stored with the purpose network address,
Then inquire about and obtain the page status of the purpose network address；If not storing the purpose network address, inquire about and obtain described treat
Detect the page status of network address；Compared in the prior art, directly detecting the page status of each network address to be detected, the present invention
Embodiment has the beneficial effect for quickly detecting the malice network address for evading strike using redirecting technique, has saved network bandwidth
And cpu resource.
Fig. 5 is webpage detection device second embodiment high-level schematic functional block diagram of the present invention；The present embodiment and implementation described in Fig. 4
The difference of example is that webpage detection device of the present invention further includes feedback module 03；The present embodiment is only described feedback module 03,
Other modules involved by related page detection device of the present invention refer to the specific descriptions of related embodiment, no longer superfluous herein
State.
Based on the description of embodiment described in Fig. 4, as shown in figure 5, webpage detection device of the present invention further includes：
Feedback module 03, for the page status of the purpose network address of acquisition or network address to be detected to be back to client
End.
In the embodiment of the present invention, the feedback module 03 of server-side is by the page of the purpose network address of acquisition or network address to be detected
State, which is back to client, to be included：Feedback module 03 is equal by the various page status of the purpose network address of acquisition or network address to be detected
Client is back to, no matter the page status is secure page table or the dangerous page.
In the preferred embodiment of the present invention, feedback module 03 is only by the purpose network address got or network address to be detected
Page status when being the dangerous page, corresponding above-mentioned page status is just back to client, while remind client to this
Webpage is accessed with caution.
In view of the sensory experience of client user, feedback module 03 can be only by the purpose network address or to be detected of acquisition
The page status of network address is that the situation of the dangerous page is back to client, to remind client to access the webpage with caution；
In the case of the purpose network address of acquisition or the page status of network address to be detected are secure page table, feedback module 03 can be direct
The corresponding page of the network address is obtained, and the page of acquisition is directly pushed into client.
The page status of the purpose network address of acquisition or network address to be detected is back to client by server-side of the embodiment of the present invention
End, has the beneficial effect for reminding the client page status to be accessed；Especially when the page status of acquisition is dangerous page
During face, also have and improve the beneficial effect that client accesses internet security.
Fig. 6 is webpage detection device 3rd embodiment high-level schematic functional block diagram of the present invention；The present embodiment and implementation described in Fig. 5
The difference of example is that webpage detection device of the embodiment of the present invention further includes memory module 04；The present embodiment carries out memory module 04
Description, meanwhile, also enquiry module 02 is described further；And other moulds involved by for webpage detection device of the present invention
Block, refer to the specific descriptions of related embodiment, details are not described herein.
Based on the description of embodiment described in Fig. 4 and Fig. 5, as shown in fig. 6, webpage detection device of the present invention further includes：
Memory module 04, for storing the page status of the network address to be detected detected, while stores described to be checked
Purpose network address and the network address to be detected after survey grid location redirects redirect relation.
It is first when matching module 01 receives the instruction of the detection to a certain network address of client triggering in the embodiment of the present invention
The relation that redirects of the network address to be detected is first matched, the purpose net after the network address to be detected redirects whether is stored with searching data storehouse
Location.
When matching module 01 does not find the purpose network address after network address to be detected redirects, 02 searching data of enquiry module
Whether the to be detected network address corresponding page status is stored with storehouse；If being stored with the page status of the network address to be detected, look into
Ask the page status that module 02 obtains the network address to be detected of storage.If the page shape of the network address to be detected is not stored
State, what enquiry module 02 detected the network address to be detected redirects relation；According to result of detection, detect and obtain the survey grid to be checked
The page status of location.
The network address to be detected is being detected there are during purpose network address, enquiry module 02 is downloaded after the network address to be detected redirects
The corresponding content of pages of purpose network address, analyze the content of pages of the purpose network address of download, obtain the page of the purpose network address
State；Page status using the page status of the purpose network address of acquisition as the network address to be detected.It is described detecting
When purpose network address is not present in network address to be detected, enquiry module 02 directly downloads the corresponding content of pages of the network address to be detected, and point
The content of pages for the network address to be detected downloaded is analysed, obtains the page status of the network address to be detected.
Further, in the present embodiment, what enquiry module 02 detected network address to be detected redirects relation, identifies the survey grid to be checked
The purpose network address that location whether there is after redirecting is realized by downloading the http heads of network address to be detected；Enquiry module 02 is under
Information during the network address to be detected that carries is http corresponding, can recognize that the network address to be detected with the presence or absence of the purpose after redirecting
Network address；This is because include the information of the purpose network address after the network address to be detected redirects in the http heads of network address to be detected, should
Information exists in the form of plaintext, and according to the information in http, enquiry module 02 can obviously draw the survey grid to be checked
Whether location has the purpose network address after redirecting.
For example enquiry module 02 obtains a network address http to be detected://t.cn/hfwpFThe packet of 111 http heads
Include：
HTTP/1.1302Moved Temporarily
Location:http://qq.com
According to the corresponding http headers of the network address to be detected, enquiry module 02 can obtain the network address to be detected
http://t.cn/hfwpF111 redirect after purpose network address be http://qq.com.
For the ease of the convenience of subsequent detection network address, the embodiment of the present invention further updates corresponding database, storage
Module 04 stores the page status of the network address not yet stored detected into database；Meanwhile exist in the network address and redirect
During rear purpose network address, what memory module 04 stored the purpose network address after the network address redirects and the network address redirects relation, and the net
Location redirects the page status of rear purpose network address.
When N number of different URL is redirected to same purpose URL, using existing network address detection method, it is necessary to this mesh
The corresponding pagefiles of URL download n times respectively, and this n times is downloaded due to being carried out for purpose URL, this N
Secondary is repeated downloads.And then only needed based on the above-mentioned thought of network address of embodiment of the present invention detection device detection webpage, server-side
Download n times http and a purpose URL corresponding page file.Compared to the pagefile size of download, under server-side
The expense of http is carried to can be ignored substantially.
When the inquiry of server-side of the embodiment of the present invention does not store the page status of network address to be detected, the jump of network address to be detected is detected
Transfer the registration of Party membership, etc. from one unit to another；According to result of detection, detect and obtain the page status of network address to be detected；Opening when reducing server-side detection network address
Pin, has the beneficial effect for further saving network bandwidth and cpu resource.
It should be noted that herein, term " comprising ", "comprising" or its any other variant are intended to non-row
His property includes, so that process, method, article or device including a series of elements not only include those key elements, and
And other elements that are not explicitly listed are further included, or further include as this process, method, article or device institute inherently
Key element.In the absence of more restrictions, the key element limited by sentence "including a ...", it is not excluded that including this
Also there are other identical element in the process of key element, method, article or device.
The embodiments of the present invention are for illustration only, do not represent the quality of embodiment.
Through the above description of the embodiments, those skilled in the art can be understood that above-described embodiment side
Method can add the mode of required general hardware platform to realize by software, naturally it is also possible to by hardware, but in many cases
The former is more preferably embodiment.Based on such understanding, technical scheme substantially in other words does the prior art
Going out the part of contribution can embody in form of a computer software product, which is stored in Fig. 4 to Fig. 6
One storage medium of the webpage detection device（Such as ROM/RAM, magnetic disc, CD）In, which includes some fingers
Order is used so that a station terminal equipment（Can be mobile phone, computer, server, either described in the network equipment or Fig. 4 to Fig. 6
Webpage detection device etc.）Perform the method described in each embodiment of the present invention.
The foregoing is merely the preferred embodiment of the present invention, not thereby limits its scope of the claims, every to utilize the present invention
The equivalent structure or equivalent flow shift that specification and accompanying drawing content are made, is directly or indirectly used in other relevant technology necks
Domain, is included within the scope of the present invention.
Claims (10)
1. a kind of page detection method, it is characterised in that comprise the following steps：
When server-side receives the instruction of the detection to a certain network address of client triggering, match the network address to be detected redirects pass
System, searches whether to be stored with the purpose network address after the network address to be detected redirects；
If finding the purpose network address, inquire about and obtain the page status of the purpose network address；
If not finding the purpose network address, inquire about and obtain the page status of the network address to be detected.
2. the method as described in claim 1, it is characterised in that further include：
The page status of the purpose network address of acquisition or network address to be detected is back to client.
3. method as claimed in claim 1 or 2, it is characterised in that described to inquire about and obtain the page of the network address to be detected
State, including：
Whether inquiry is stored with the page status of the network address to be detected；
If being stored with the page status of the network address to be detected, the page status of the network address to be detected of storage is obtained；
If not storing the page status of the network address to be detected, detect the network address to be detected redirects relation；According to detection
As a result, detect and obtain the page status of the network address to be detected；
Wherein, it is described according to result of detection, detect and obtain the page status of the network address to be detected, including：
The network address to be detected is detected there are during purpose network address, downloading the corresponding content of pages of the purpose network address, under analysis
The content of pages of the purpose network address carried, obtains the page status of the purpose network address；By the purpose network address of acquisition
Page status of the page status as the network address to be detected；
When detecting the network address to be detected purpose network address is not present, the corresponding content of pages of the network address to be detected is downloaded, point
The content of pages for the network address to be detected downloaded is analysed, obtains the page status of the network address to be detected.
4. method as claimed in claim 3, it is characterised in that the relation that redirects for detecting the network address to be detected, including：
The http heads of the network address to be detected are downloaded, according to the information in http described, whether identify the network address to be detected
There is the purpose network address after redirecting.
5. method as claimed in claim 3, it is characterised in that it is described according to result of detection, detect and obtain described to be detected
The page status of network address, further includes afterwards：
The page status of the network address to be detected detected is stored, meanwhile, there is the mesh after redirecting in the network address to be detected
Network address when, store the purpose network address after the network address to be detected redirects and the network address to be detected redirects relation.
A kind of 6. webpage detection device, it is characterised in that including：
Matching module, when server-side is used for the instruction of the detection to a certain network address for receiving client triggering, it is to be checked to match this
Survey grid location redirects relation, searches whether to be stored with the purpose network address after the network address to be detected redirects；
Enquiry module, for when finding the purpose network address, inquiring about and obtaining the page status of the purpose network address；Do not having
When finding the purpose network address, inquire about and obtain the page status of the network address to be detected.
7. device as claimed in claim 6, it is characterised in that further include：
Feedback module, for the page status of the purpose network address of acquisition or network address to be detected to be back to client.
8. device as claimed in claims 6 or 7, it is characterised in that the enquiry module is additionally operable to：
Whether inquiry is stored with the page status of the network address to be detected；
If being stored with the page status of the network address to be detected, the page status of the network address to be detected of storage is obtained；
If not storing the page status of the network address to be detected, detect the network address to be detected redirects relation；According to detection
As a result, detect and obtain the page status of the network address to be detected；
Wherein, the enquiry module is additionally operable to：
The network address to be detected is detected there are during purpose network address, downloading the corresponding content of pages of the purpose network address, under analysis
The content of pages of the purpose network address carried, obtains the page status of the purpose network address；By the purpose network address of acquisition
Page status of the page status as the network address to be detected；
When detecting the network address to be detected purpose network address is not present, the corresponding content of pages of the network address to be detected is downloaded, point
The content of pages for the network address to be detected downloaded is analysed, obtains the page status of the network address to be detected.
9. device as claimed in claim 8, it is characterised in that the enquiry module is additionally operable to：
The http heads of the network address to be detected are downloaded, according to the information in http described, whether identify the network address to be detected
There is the purpose network address after redirecting.
10. device as claimed in claim 8, it is characterised in that further include：
Memory module, for storing the page status of the network address to be detected detected, meanwhile, deposited in the network address to be detected
In the purpose network address after redirecting, redirecting for the purpose network address after the network address to be detected redirects and the network address to be detected is stored
Relation.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310643263.XA CN104679798B (en) | 2013-12-03 | 2013-12-03 | Page detection method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310643263.XA CN104679798B (en) | 2013-12-03 | 2013-12-03 | Page detection method and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN104679798A CN104679798A (en) | 2015-06-03 |
| CN104679798B true CN104679798B (en) | 2018-04-27 |
Family
ID=53314850
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201310643263.XA Active CN104679798B (en) | 2013-12-03 | 2013-12-03 | Page detection method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104679798B (en) |
Families Citing this family (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106484720B (en) * | 2015-08-28 | 2019-07-23 | 北京奇虎科技有限公司 | A kind of method and apparatus of the validity of detection popularization URL |
| CN107391517A (en) * | 2016-05-17 | 2017-11-24 | 广州市动景计算机科技有限公司 | The display methods and device of website and webpage |
| CN108259416B (en) * | 2016-12-28 | 2021-06-22 | 华为技术有限公司 | Method for detecting malicious webpage and related equipment |
| CN106992975B (en) * | 2017-03-21 | 2021-01-12 | 腾讯科技（深圳）有限公司 | Malicious website identification method and device |
| CN110688592B (en) * | 2018-07-06 | 2022-06-21 | 武汉斗鱼网络科技有限公司 | External link skipping method, storage medium, electronic device and system |
| CN111898046B (en) * | 2020-07-16 | 2024-02-13 | 北京天空卫士网络安全技术有限公司 | Method and device for redirection management |
| CN114741628A (en) * | 2021-01-07 | 2022-07-12 | 腾讯科技（深圳）有限公司 | A web page loading method and related device |
| CN114065092B (en) * | 2021-11-10 | 2025-03-21 | 奇安信科技集团股份有限公司 | Website identification method, device, computer equipment and storage medium |
Family Cites Families (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7694135B2 (en) * | 2004-07-16 | 2010-04-06 | Geotrust, Inc. | Security systems and services to provide identity and uniform resource identifier verification |
| US8429734B2 (en) * | 2007-07-31 | 2013-04-23 | Symantec Corporation | Method for detecting DNS redirects or fraudulent local certificates for SSL sites in pharming/phishing schemes by remote validation and using a credential manager and recorded certificate attributes |
| CN103179095B (en) * | 2011-12-22 | 2016-03-30 | 阿里巴巴集团控股有限公司 | A kind of method and client terminal device detecting fishing website |
| CN102402620A (en) * | 2011-12-26 | 2012-04-04 | 余姚市供电局 | Malicious webpage defense method and system |
| CN103338211A (en) * | 2013-07-19 | 2013-10-02 | 腾讯科技（深圳）有限公司 | Malicious URL (unified resource locator) authenticating method and device |
-
2013
- 2013-12-03 CN CN201310643263.XA patent/CN104679798B/en active Active
Also Published As
| Publication number | Publication date |
|---|---|
| CN104679798A (en) | 2015-06-03 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN104679798B (en) | Page detection method and device | |
| CN109274632B (en) | Method and device for identifying a website | |
| US8869271B2 (en) | System and method for risk rating and detecting redirection activities | |
| US8819819B1 (en) | Method and system for automatically obtaining webpage content in the presence of javascript | |
| US9258289B2 (en) | Authentication of IP source addresses | |
| CN102663000B (en) | The maliciously recognition methods of the method for building up of network address database, maliciously network address and device | |
| CN106657044B (en) | A web page address jumping method for improving the security defense of the website system | |
| CN102428685B (en) | Method for rating urls | |
| CN105335404A (en) | Page information loading method and device | |
| CN104065736B (en) | A kind of URL reorientation methods, apparatus and system | |
| CN104125121A (en) | Network hijacking behavior detecting system and method | |
| CN105260469B (en) | A kind of method, apparatus and equipment for handling site maps | |
| CN110430188A (en) | A kind of quick url filtering method and device | |
| CN105635064B (en) | CSRF attack detection method and device | |
| US8789177B1 (en) | Method and system for automatically obtaining web page content in the presence of redirects | |
| CN107239701A (en) | Recognize the method and device of malicious websites | |
| US10491606B2 (en) | Method and apparatus for providing website authentication data for search engine | |
| CN102902722B (en) | A kind of disposal route of Information Security and system | |
| CN109660552A (en) | A kind of Web defence method combining address jump and WAF technology | |
| CN111541672A (en) | Method and system for detecting security of HTTP (hyper text transport protocol) request | |
| CN104158697B (en) | A kind of dead chain detection method and device | |
| CN105791293A (en) | Malicious website blocking method and device in multi-core browser | |
| CN106803830B (en) | Method, device and system for identifying internet access terminal and User Identity Module (UIM) card | |
| CN106161352A (en) | A kind of matching process and client, server and matching unit | |
| CN101334779A (en) | Information providing method and equipment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |