基于BHO构建轻量级上网行为监控系统
|
摘要
基于BHO劫持技术实现了一个轻量级的上网行为监控系统。该系统通过BHO实现与IE浏览器的绑定,确保了用户每个Web页面浏览行为都能得到有效监控。通过捕获DISPID_BEFORENAVIGATE2和DISPID_DOCUMENT-COMPLETE事件,并使用页面替换和脚本执行两种方式,实现了网站屏蔽和网页过滤功能,达到了对用户浏览不良或非法Web页面行为进行监控的目的。通过使用模块化设计思路和"捎带"的"心跳"信号报告策略,使得系统能够同时适用于个人用户和机构用户,并具有较高的通信效率,从而提供了一种具有较好通用性和有效性的网络防护手段。
An Internet exploring behavior monitor is implemented based on BHO hacking technology to effectively monitor and control all operations of webpage exploring by binding the system with IE.Firstly,two events of DISPID_BEFORENAVIGATE2 and DISPID_DOCUMENTCOMPLETE are caught.Secondly,webpage replacing and script executing technologies are used.Based on these methods,functions of website blocking and webpage filtering are implemented to fulfill the target of monitoring and controlling the activities of a user to explore illegal or unhealthy webpage.Thirdly,modularity design idea and piggybacking heartbeat reporting technology are used to elevate universality and improve efficiency of the system.Based on these methods,this system is used for both individual user and an organization to provide a lightweight network safeguard tool.
An Internet exploring behavior monitor is implemented based on BHO hacking technology to effectively monitor and control all operations of webpage exploring by binding the system with IE.Firstly,two events of DISPID_BEFORENAVIGATE2 and DISPID_DOCUMENTCOMPLETE are caught.Secondly,webpage replacing and script executing technologies are used.Based on these methods,functions of website blocking and webpage filtering are implemented to fulfill the target of monitoring and controlling the activities of a user to explore illegal or unhealthy webpage.Thirdly,modularity design idea and piggybacking heartbeat reporting technology are used to elevate universality and improve efficiency of the system.Based on these methods,this system is used for both individual user and an organization to provide a lightweight network safeguard tool.
引文
[1]Net Nanny.Net Nanny net filter[EB/OL].[2012-10-12].ht-tp://www.netnanny.com/.
[2]Baidu.BHO[EB/OL].[2012-08-31].http://baike.baidu.com/view/362533.htm(in Chinese).[百度文库.BHO[EB/OL].[2012-08-31.]http://baike.baidu.com/view/362533.htm.]
[3]FENG Xueping,LI Zhitang,XU Hao,et al.A method of mali-cious webpages behavior detection based on BHO technology[J].Journal of Guangxi University(Natural Science Edition),2011,36(z1):122-126(in Chinese).[冯雪坪,李芝棠,涂浩,等.基于BHO技术的恶意网页行为检测方法[J].广西大学学报(自然科学版),2011,36(z1):122-126.]
[4]SANG Qingbing,WU Xiaojun.Research and implementation ofBHO-based website filtering system[J].Computer Engineeringand Applications,2009,45(31):18-21(in Chinese).[桑庆兵,吴小俊.基于BHO的网站过滤系统研究与实现[J].计算机工程与应用,2009,45(31):18-21.]
[5]JIANG Liya,HUO Hongtao.Filter of erotic images based onIE[J].Application Research of Computers,2009,26(3):1180-1183(in Chinese).[蒋丽亚,霍宏涛.基于IE浏览器的色情图像过滤器[J].计算机应用研究,2009,26(3):1180-1183.]
[6]WANG Juan,GUO Yongchong,WANG Qiang.Research ofnetwork covert channel based on BHO[J].Computer Engi-neering,2009,35(5):159-161(in Chinese).[王娟,郭永冲,王强.基于BHO的网络隐蔽通道研究[J].计算机工程,2009,35(5):159-161.]
[7]Vckbase.How to have your Internet Explorer custom-madewith BHO[EB/OL].[2012-10-12].http://www.vckbase.com/index.php/Old/index/id/1426(in Chinese).[VC知识库.如何使用BHO定制你的Internet Explorer浏览器[EB/OL].[2012-10-12].http://www.vckbase.com/index.php/Old/index/id/1426.]
[8]LU Qiming.Developing BHO plug-ins with VC++——havingyour explorer custom-made[EB/OL].[2012-10-12].ht-tp://www.cnblogs.com/hbifts/articles/24265.html(inChinese).[陆其明.VC++开发BHO插件——定制你的浏览器[EB/OL].[2012-10-12].http://www.cnblogs.com/hbifts/articles/24265.html.]
[9]WANG Zhifei.Analysis of ATL intelligent pointers CComPtrand CComQIPtr[J].Journal of Liaoning Teachers College,2009,11(4):37-39(in Chinese).[王志飞.ATL智能指针类CComPtr与CComQIPtr解析[J].辽宁师专学报,2009,11(4):37-39.]
[10]Christopher Tavares,Kirk Fertitta,Brent E Rector.ATL in-ternals:Working with ATL 8[M].2nd ed.Boston,Massa-chusetts,USA:Addison Wesley Professional,2006:137-159.
[2]Baidu.BHO[EB/OL].[2012-08-31].http://baike.baidu.com/view/362533.htm(in Chinese).[百度文库.BHO[EB/OL].[2012-08-31.]http://baike.baidu.com/view/362533.htm.]
[3]FENG Xueping,LI Zhitang,XU Hao,et al.A method of mali-cious webpages behavior detection based on BHO technology[J].Journal of Guangxi University(Natural Science Edition),2011,36(z1):122-126(in Chinese).[冯雪坪,李芝棠,涂浩,等.基于BHO技术的恶意网页行为检测方法[J].广西大学学报(自然科学版),2011,36(z1):122-126.]
[4]SANG Qingbing,WU Xiaojun.Research and implementation ofBHO-based website filtering system[J].Computer Engineeringand Applications,2009,45(31):18-21(in Chinese).[桑庆兵,吴小俊.基于BHO的网站过滤系统研究与实现[J].计算机工程与应用,2009,45(31):18-21.]
[5]JIANG Liya,HUO Hongtao.Filter of erotic images based onIE[J].Application Research of Computers,2009,26(3):1180-1183(in Chinese).[蒋丽亚,霍宏涛.基于IE浏览器的色情图像过滤器[J].计算机应用研究,2009,26(3):1180-1183.]
[6]WANG Juan,GUO Yongchong,WANG Qiang.Research ofnetwork covert channel based on BHO[J].Computer Engi-neering,2009,35(5):159-161(in Chinese).[王娟,郭永冲,王强.基于BHO的网络隐蔽通道研究[J].计算机工程,2009,35(5):159-161.]
[7]Vckbase.How to have your Internet Explorer custom-madewith BHO[EB/OL].[2012-10-12].http://www.vckbase.com/index.php/Old/index/id/1426(in Chinese).[VC知识库.如何使用BHO定制你的Internet Explorer浏览器[EB/OL].[2012-10-12].http://www.vckbase.com/index.php/Old/index/id/1426.]
[8]LU Qiming.Developing BHO plug-ins with VC++——havingyour explorer custom-made[EB/OL].[2012-10-12].ht-tp://www.cnblogs.com/hbifts/articles/24265.html(inChinese).[陆其明.VC++开发BHO插件——定制你的浏览器[EB/OL].[2012-10-12].http://www.cnblogs.com/hbifts/articles/24265.html.]
[9]WANG Zhifei.Analysis of ATL intelligent pointers CComPtrand CComQIPtr[J].Journal of Liaoning Teachers College,2009,11(4):37-39(in Chinese).[王志飞.ATL智能指针类CComPtr与CComQIPtr解析[J].辽宁师专学报,2009,11(4):37-39.]
[10]Christopher Tavares,Kirk Fertitta,Brent E Rector.ATL in-ternals:Working with ATL 8[M].2nd ed.Boston,Massa-chusetts,USA:Addison Wesley Professional,2006:137-159.