| With the rapid development of Internet,Web services have shown explosive growth.While enjoying digital life with the help of Web services,people bear the risk of network security.Under the new situation,the strategic position of cyberspace is constantly rising.Websites have become an important battlefield of network attack and defense.Given it is difficult for traditional defense technology to provide comprehensive protect for websites when dealing with Web attacks of escalating methods,it is of great strategic significance to study the defense technology with active defense capability.Attribution,as an important part of active defense system,is the research goal of this paper.With the popularity of Web services,browser scripts can be executed on mainstream browsers,so using browser scripts to track Web attacks has unique advantages.This paper focuses on the attribution technology based on browser script injection,aiming at improving the active defense capability of the website.The contributions of the paper are listed as follows:(1)This paper constructs a theoretical model of Web attack attribution based on browser script injection,studies five application scenarios of the model and further analyses the advantages of the idea.(2)This paper studies several main technologies,including browser script injection technology,browser script extraction technology,information transmission technology,browser fingerprint generation technology and fingerprint association technology.Browser fingerprints are generated based on extracted feature information to identify and track attackers,and fingerprint association is further implemented through LSTM algorithm to achieve continuous tracking.(3)This paper implements an attribution assistant system,and evaluates the extraction module and fingerprint association module.The results show that the browser script and association algorithm can effectively complete the task of information extraction and fingerprint association. |
PDF Full Text Request