Web page falsification detection apparatus and storage medium

摘要

According to one embodiment, a Web page falsification detection apparatus, a dynamic information falsification determination module determines whether extracted dynamic information corresponds to dynamic characteristic information, and extracts a plurality of static information items. A second generation module couples the extracted static information items, and generates second static characteristic information. A static information falsification determination module determines whether first static characteristic information matches with the generated second static characteristic information, and transmits the Web page information to a user terminal.

主权项

1. A Web page falsification detection apparatus provided in a Web server device including an application logic module capable of communicating with a user terminal which displays a Web page, the Web page falsification detection apparatus including a characteristic information storage module, being capable of communicating with a manager terminal, and executing falsification checking processing for Web page information to display the Web page on the user terminal,
the Web page falsification detection apparatus comprising: a first extraction module which receives a Web page generation program configured to generate the Web page information and including a dynamic information calculation program configured to calculate dynamic information to display a changed part in the Web page, comment information including dynamic characteristic information indicating a characteristic including a range of change of the dynamic information, and a plurality of static information items to display an unchanged part in the Web page, and extracts the comment information from the received Web page generation program; a dynamic characteristic information extraction module which extracts the dynamic characteristic information from the extracted comment information; a second extraction module which extracts the static information items from the received Web page generation program; a first generation module which couples the extracted static information items, and generates first static characteristic information that indicates a characteristic of the static information, based on the coupled static information and function information that indicates a predetermined unidirectional function; a first writing module which correlates identification information for identifying the Web page information, the extracted dynamic characteristic information, and the generated first static characteristic information, and writes the correlated information items in the characteristic information storage module; a second writing module which writes the received Web page generation program in a storage module in the Web server device; a third extraction module which extracts the dynamic information from Web page information transmitted from the application logic module, the Web page information being generated from the Web page generation program in the storage module by the application logic module which has received a Web page obtaining request from the user terminal, and including the dynamic information, the comment information, and the static information items; a dynamic information falsification determination module which reads the extracted dynamic characteristic information from the characteristic information storage module based on the identification information for identifying the Web page information generated by the application logic module, and determines whether the extracted dynamic information corresponds to the dynamic characteristic information read from the characteristic information storage module; a fourth extraction module which extracts the static information items from the transmitted Web page information, when a result of determination by the dynamic information falsification determination module indicates that the dynamic information corresponds to the dynamic characteristic information; a second generation module which couples the extracted static information items, and generates second static characteristic information that indicates a characteristic of the coupled static information, based on the coupled static information and the function information; a static information falsification determination module which determines whether the first static characteristic information stored in the characteristic information storage module matches with the generated second static characteristic information; and a transmission module which transmits the transmitted Web page information to the user terminal, when a result of determination by the static information falsification determination module indicates that the first static characteristic information matches with the generated second static characteristic information.