CN111049731B - Instant chat application monitoring method and system - Google Patents

Instant chat application monitoring method and system Download PDF

Info

Publication number
CN111049731B
CN111049731B CN201911237290.0A CN201911237290A CN111049731B CN 111049731 B CN111049731 B CN 111049731B CN 201911237290 A CN201911237290 A CN 201911237290A CN 111049731 B CN111049731 B CN 111049731B
Authority
CN
China
Prior art keywords
file
picture
instant messaging
client
address information
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201911237290.0A
Other languages
Chinese (zh)
Other versions
CN111049731A (en
Inventor
王浩
黄瑞
陈浪
刘永强
周勇林
沈智杰
景晓军
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Shenzhen Surfilter Technology Development Co ltd
Surfilter Network Technology Co ltd
Original Assignee
Shenzhen Surfilter Technology Development Co ltd
Surfilter Network Technology Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Shenzhen Surfilter Technology Development Co ltd, Surfilter Network Technology Co ltd filed Critical Shenzhen Surfilter Technology Development Co ltd
Priority to CN201911237290.0A priority Critical patent/CN111049731B/en
Publication of CN111049731A publication Critical patent/CN111049731A/en
Application granted granted Critical
Publication of CN111049731B publication Critical patent/CN111049731B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L51/00User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
    • H04L51/04Real-time or near real-time messaging, e.g. instant messaging [IM]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/06Protocols specially adapted for file transfer, e.g. file transfer protocol [FTP]

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Information Transfer Between Computers (AREA)

Abstract

The invention discloses a method and a system for monitoring instant chat application, wherein the method comprises the following steps: when the client monitors that the front end of the desktop shows that an instant messaging tool needing to be monitored is displayed, the client performs screen capture on the current desktop, and uploads a picture file, instant messaging tool information and client address information obtained by screen capture to the server; the server receives and stores the picture file uploaded by the client, performs picture identification on the received picture file, stores the identified chat content, the instant messaging tool information and the client address information carried by the picture file in an associated manner, and takes all the stored instant messaging tool information associated with the client address information carried by the query instruction and the chat content associated with each instant messaging tool information as query results when acquiring the query instruction, so that the network management of a company can conveniently perform instant messaging tool monitoring.

Description

Instant chat application monitoring method and system
Technical Field
The invention relates to the field of information security, in particular to a method and a system for monitoring instant chat application.
Background
Enterprise information security is very important in the current social environment, and an instant chat tool is a common communication channel for enterprise employees. Because the chatting tool adopts a data encryption transmission mode, the management equipment can only extract the account number of the instant chatting tool through analyzing the message and cannot obtain the specific content of the chatting tool, so that the behavior of divulging the secret by using the chatting tool is difficult to know, and the method for extracting the chatting information is limited.
Disclosure of Invention
The technical problem to be solved by the present invention is to provide a method and a system for monitoring an instant chat application, aiming at the above-mentioned defects in the prior art.
The technical scheme adopted by the invention for solving the technical problems is as follows:
in one aspect, a method for monitoring an instant chat application is constructed, the method comprising:
when the client monitors that the front end of the desktop shows that an instant messaging tool which needs to be monitored is displayed, the client captures a screen of the current desktop;
the client uploads the picture file obtained by screen capture, the instant messaging tool information displayed at the front end of the desktop and the client address information to the server;
the server receives and stores the picture file uploaded by the client;
the server identifies the received picture file by the picture, and stores the identified chat content, the instant messaging tool information carried by the picture file and the client address information in an associated manner;
and when the server side obtains the query instruction, all the stored instant messaging tool information associated with the client address information carried by the query instruction and the chat content associated with each instant messaging tool information are used as query results.
Preferably, the screen capturing of the current desktop specifically includes: performing screen capturing at intervals of preset time T1, if the image file obtained by screen capturing is different from the previous image file, storing the image file obtained by screen capturing into a local preset file directory, and carrying the instant messaging tool information displayed at the front end of the currently monitored desktop and the acquired client address information in the name of the image file during storage;
preferably, the uploading the captured picture file, the instant messaging tool information displayed at the front end of the desktop, and the client address information to the server specifically includes: scanning a preset file directory once every preset time T2, and if the preset file directory is scanned to find that a new picture file exists in the preset file directory, uploading the newly found picture file to the server side in an FTP transmission mode;
preferably, the receiving and storing the picture file uploaded by the client specifically includes: and receiving the picture file transmitted in the FTP transmission mode, and storing the picture file into a preset picture file receiving directory.
Preferably, the image recognition of the received image file, and the associated storage of the recognized chat content, the instant messaging tool information and the client address information carried by the image file specifically include: scanning a preset picture file receiving directory once every preset time T3, if a new picture file exists in the preset picture file receiving directory, extracting instant communication tool information and client address information from the name of the newly found picture file, calling the newly found picture file for picture identification, writing the identified chat content into a text file of an appointed directory, wherein the name of the written text file carries the extracted instant communication tool information and client address information.
Preferably, the method further comprises: scanning the appointed directory once every preset time T4, if the appointed directory is scanned to find that a new text file exists in the appointed directory, extracting instant communication tool information and client address information from the name of the newly found text file, opening the newly found text file to read chat content, and storing the extracted instant communication tool information and client address information and the read chat content in a relational database in a correlated manner for being inquired by a WEB server.
In the second aspect, an instant chat application monitoring system is constructed, which comprises a server and a client;
wherein the client comprises:
a picture capture module configured to: when the fact that the front end of the desktop shows that an instant messaging tool which needs to be monitored is monitored, screen capturing is carried out on the current desktop;
an upload module configured to: uploading the picture file obtained by screen capture, the instant messaging tool information displayed at the front end of the desktop and the client address information to a server;
wherein, the server side includes:
a receiving module configured to: receiving and storing picture files uploaded by a client;
an identification module configured to: carrying out picture identification on the received picture file, and storing the identified chat content, instant messaging tool information carried by the picture file and client address information in an associated manner;
a query processing module configured to: and when the query instruction is acquired, all the stored instant messaging tool information associated with the client address information carried by the query instruction and the chat content associated with each instant messaging tool information are used as query results.
Preferably, the screen capturing of the current desktop specifically includes: and performing screen capturing at intervals of preset time T1, if the image file obtained by screen capturing is different from the last image file, storing the image file obtained by screen capturing into a local preset file directory, and carrying the instant messaging tool information displayed at the front end of the currently monitored desktop and the acquired client address information in the name of the image file during storage.
Preferably, the uploading module scans a preset file directory once every preset time T2, and if the preset file directory is found to have a new picture file by scanning, uploads the newly found picture file to the server in an FTP transmission manner;
preferably, the receiving module receives the picture file sent by the FTP transmission mode and stores the picture file in a preset picture file receiving directory.
Preferably, the identification module scans a preset picture file receiving directory at preset time T3 once, if a new picture file exists in the preset picture file receiving directory, extracts instant messaging tool information and client address information from the name of the newly found picture file, calls the newly found picture file out to perform picture identification, writes the identified chat content into a text file of an appointed directory, and the name of the written text file carries the extracted instant messaging tool information and client address information.
Preferably, the query processing step is further configured to: scanning the appointed directory once every preset time T4, if the appointed directory is scanned to find that a new text file exists in the appointed directory, extracting instant communication tool information and client address information from the name of the newly found text file, opening the newly found text file to read chat content, and storing the extracted instant communication tool information and client address information and the read chat content in a relational database in a correlated manner for being inquired by a WEB server.
In three aspects, the instant chat application monitoring system is constructed, which comprises a server side and a client side,
the processor of the client is configured to perform the steps of: when the fact that the front end of the desktop shows that an instant messaging tool which needs to be monitored is monitored, screen capturing is carried out on the current desktop; uploading the picture file obtained by screen capture, the instant messaging tool information displayed at the front end of the desktop and the client address information to a server;
the processor of the server is configured to: receiving and storing picture files uploaded by a client; carrying out picture identification on the received picture file, and storing the identified chat content, instant messaging tool information carried by the picture file and client address information in an associated manner; and when the query instruction is acquired, all the stored instant messaging tool information associated with the client address information carried by the query instruction and the chat content associated with each instant messaging tool information are used as query results.
The instant chat application monitoring method and the system have the following beneficial effects: when the client monitors that the front end of the desktop displays the instant messaging tool to be monitored, the client performs screen capture on the current desktop, uploads the picture file, the instant messaging tool information and the client address information which are obtained by screen capture to the server, the server performs picture identification, stores the identified chat content in association with the instant messaging tool information and the client address information carried by the picture file, and queries all associated instant messaging tool information and the chat content associated with each instant messaging tool information according to the client address information carried by the query instruction, so that the network manager of a company can conveniently perform instant messaging tool monitoring.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the following description are only embodiments of the present invention, and for those skilled in the art, other drawings can be obtained according to the provided drawings without creative efforts:
FIG. 1 is a flow chart of a method of instant chat application monitoring of the present invention;
fig. 2 is a block diagram of an instant chat application monitoring system of the present invention.
Detailed Description
To facilitate an understanding of the invention, the invention will now be described more fully with reference to the accompanying drawings. Exemplary embodiments of the invention are shown in the drawings. This invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete.
Unless defined otherwise, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. The terminology used in the description of the invention herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention.
The terms including ordinal numbers such as "first", "second", and the like used in the present specification may be used to describe various components, but the components are not limited by the terms. These terms are used only for the purpose of distinguishing one constituent element from other constituent elements. For example, a first component may be named a second component, and similarly, a second component may also be named a first component, without departing from the scope of the present invention.
The general idea of the invention is as follows: when the client monitors that the front end of the desktop shows that an instant messaging tool which needs to be monitored is displayed, the client captures a screen of the current desktop; the client uploads the picture file obtained by screen capture, the instant messaging tool information displayed at the front end of the desktop and the client address information to the server; the server receives and stores the picture file uploaded by the client; the server identifies the received picture file by the picture, and stores the identified chat content, the instant messaging tool information carried by the picture file and the client address information in an associated manner; and when the server side obtains the query instruction, all the stored instant messaging tool information associated with the client address information carried by the query instruction and the chat content associated with each instant messaging tool information are used as query results.
In order to better understand the technical solutions, the technical solutions will be described in detail below with reference to the drawings and the specific embodiments of the specification, and it should be understood that the embodiments and specific features of the embodiments of the present invention are detailed descriptions of the technical solutions of the present application, and are not limited to the technical solutions of the present application, and the technical features of the embodiments and examples of the present invention may be combined with each other without conflict.
Example one
Referring to fig. 1, the method for monitoring an instant chat application in this embodiment mainly includes:
a picture capturing step S101: and when the client monitors that the front end of the desktop shows the instant messaging tool needing to be monitored, the client captures the screen of the current desktop. Specifically, the image capturing step specifically includes:
1) monitoring applications displayed at the front end of the desktop.
For example, taking the client as a PC, and the PC is installed with a Windows system, this step may use the function getforegroundwindow to obtain the application of the desktop front end.
2) Judging whether the application is an instant messaging tool needing to be monitored, if so, performing screen capture at intervals of preset time T1, if the image file obtained by screen capture is different from the last image file, saving the image file obtained by screen capture into a local preset file directory, and carrying instant messaging tool information displayed at the front end of the currently monitored desktop and the acquired client address information in the name of the image file during saving.
Specifically, the instant messenger to be monitored can be preset, so that after the application at the front end of the desktop is determined in the last step 1), the application can be contrasted to find whether the application is the preset instant messenger to be monitored.
Specifically, the coordinates of the window can be obtained by using the function GetWindowRect to accurately capture the screen during screen capture.
For example, if the sizes of the two picture files are the same, the two picture files are considered to be the same, otherwise, the two picture files are considered to be different.
Wherein the preset time T1 may be 3 seconds, and the client address information may be an IP address of the client. The file name is: png, MMM represents the application name of the instant messaging tool, and XXX represents the screenshot sequence from the front end display of the MMM. For example, assuming that the user opened a WeChat with an IP of 127.5.6.9, the picture file name saved for the first time is 127.5.6.9_ weixin _1.png, 127.5.6.9_ weixin _2.png for the second time, and so on.
An uploading step S102: uploading the picture file obtained by screen capture, the instant messaging tool information displayed at the front end of the desktop and the client address information to a server;
specifically, the uploading step S302 specifically includes: scanning the preset file directory once every preset time T2, and if the scanning finds that a new picture file exists in the preset file directory, uploading the newly found picture file to the server side in an FTP transmission mode. For example, an ftp file transfer can be performed using libcurl library functions. The preset time T2 may be 3 seconds. In addition, after each uploading is finished, the uploaded files are removed from the preset file directory.
Receiving step S103: the server receives and stores the picture file uploaded by the client;
specifically, if the client uploads the picture file in an FTP manner, the server correspondingly receives the picture file in the FTP manner. In this embodiment, the server receives the picture file transmitted in the FTP transmission manner, and stores the picture file in the preset picture file receiving directory. The name of the picture file carries the information of the instant messaging tool and the address information of the client, which can refer to a part of the above embodiments and is not described herein again. In this embodiment, the server side adopts a linux server of centros 7, picture reception is realized by an ftp service program vsftpd in the system, and an ftp service is opened by default to receive a file.
An identification step S104: and the server identifies the received picture file by the picture, and stores the identified chat content, the instant messaging tool information carried by the picture file and the client address information in an associated manner.
The step S104 specifically includes: scanning a preset picture file receiving directory once every preset time T3, if a new picture file exists in the preset picture file receiving directory, extracting instant communication tool information and client address information from the name of the newly found picture file, calling the newly found picture file for picture identification, writing the identified chat content into a text file of an appointed directory, wherein the name of the written text file carries the extracted instant communication tool information and client address information.
The preset time T3 may be 10 seconds. And after each identification, removing the identified file from the preset picture file receiving directory. In the embodiment, the existing tesseract-ocr identification program is adopted to identify the picture. In this embodiment, the text file is a selected TXT file, and of course, theoretically, other files, such as word, may also be selected. The name of the text file is the same as the corresponding picture file, for example, the picture file is IP _ MMM _ xxx.png, and the identified text file is IP _ MMM _ xxx.txt.
Query processing step S105: and when the server side obtains the query instruction, all the stored instant messaging tool information associated with the client address information carried by the query instruction and the chat content associated with each instant messaging tool information are used as query results.
Preferably, the query can be realized by combining Apache, PHP and a relational database (such as Mysql). Therefore, the step further comprises: the server scans the appointed directory once every preset time T4, if a new text file exists in the appointed directory, the instant communication tool information and the client address information are extracted from the name of the newly found text file, the newly found text file is opened to read the chat content, and the extracted instant communication tool information and the client address information as well as the read chat content are stored in a relational database in an associated manner for being inquired by a WEB server Apache. Wherein the preset time T4 may be 5 seconds. In addition, in this embodiment, after the information carried by the text file is stored in the relational database each time, the text file is removed from the designated directory. In addition, when the information is stored in the relational database, the address information of the client is used as a main key for storage, so that subsequent query is facilitated.
For example, an Apache server is developed at a server, a front-end query page is realized by using a PHP, an administrator can open the PHP front-end query page through any terminal, then IP information is input, a query instruction carrying the IP information is sent to the Apache server by the front-end query page, the Apache server extracts the IP information from the query instruction after receiving the query instruction, then a query result can be obtained by querying Mysql according to the IP information, and the query result is returned to the PHP front-end query page for display.
Example two
Based on the same inventive concept, the embodiment discloses an instant chat application monitoring system, which comprises a server and a client.
Wherein the client comprises:
a picture capture module 201 configured to: when the fact that the front end of the desktop shows that an instant messaging tool which needs to be monitored is monitored, screen capturing is carried out on the current desktop;
an upload module 202 configured to: uploading the picture file obtained by screen capture, the instant messaging tool information displayed at the front end of the desktop and the client address information to a server;
wherein, the server side includes:
a receiving module 203 configured to: receiving and storing picture files uploaded by a client;
an identification module 204 configured to: carrying out picture identification on the received picture file, and storing the identified chat content, instant messaging tool information carried by the picture file and client address information in an associated manner;
a query processing module 205 configured to: and when the query instruction is acquired, all the stored instant messaging tool information associated with the client address information carried by the query instruction and the chat content associated with each instant messaging tool information are used as query results.
Specifically, the screen capturing of the current desktop specifically includes: and performing screen capturing at intervals of preset time T1, if the image file obtained by screen capturing is different from the last image file, storing the image file obtained by screen capturing into a local preset file directory, and carrying the instant messaging tool information displayed at the front end of the currently monitored desktop and the acquired client address information in the name of the image file during storage.
Specifically, the uploading module 202 scans a preset file directory every a preset time T2, and if the preset file directory is found by scanning to have a new picture file, uploads the newly found picture file to the server via an FTP transmission manner;
specifically, the receiving module 203 receives the picture file sent in the FTP transmission manner, and stores the picture file in a preset picture file receiving directory.
Specifically, the identifying module 204 scans the preset picture file receiving directory at a preset time interval T3, extracts instant messaging tool information and client address information from the name of the newly found picture file if the preset picture file receiving directory is found to have a new picture file by scanning, calls the newly found picture file to perform picture identification, writes the identified chat content into the text file of the specified directory, and carries the extracted instant messaging tool information and client address information in the name of the written text file.
Preferably, the query processing step 205 is further configured to: scanning the appointed directory once every preset time T4, if the appointed directory is scanned to find that a new text file exists in the appointed directory, extracting instant communication tool information and client address information from the name of the newly found text file, opening the newly found text file to read chat content, and storing the extracted instant communication tool information and client address information and the read chat content in a relational database in a correlated manner for being inquired by a WEB server.
The functions of the functional modules described in the embodiments of the present invention may be specifically implemented according to the method in the above method embodiments, and the specific implementation process may refer to the related description of the above method embodiments, which is not described herein again.
EXAMPLE III
Based on the same inventive concept, the embodiment discloses an instant chat application monitoring system, which comprises a server and a client,
the processor of the client is configured to perform the steps of: when the fact that the front end of the desktop shows that an instant messaging tool which needs to be monitored is monitored, screen capturing is carried out on the current desktop; uploading the picture file obtained by screen capture, the instant messaging tool information displayed at the front end of the desktop and the client address information to a server;
the processor of the server is configured to: receiving and storing picture files uploaded by a client; carrying out picture identification on the received picture file, and storing the identified chat content, instant messaging tool information carried by the picture file and client address information in an associated manner; and when the query instruction is acquired, all the stored instant messaging tool information associated with the client address information carried by the query instruction and the chat content associated with each instant messaging tool information are used as query results.
For more details, reference may be made to a part of the above-mentioned embodiments, which are not described herein again.
In summary, the instant chat application monitoring method and system of the present invention have the following beneficial effects: when the client monitors that the front end of the desktop displays the instant messaging tool to be monitored, the client performs screen capture on the current desktop, uploads the picture file, the instant messaging tool information and the client address information which are obtained by screen capture to the server, the server performs picture identification, stores the identified chat content in association with the instant messaging tool information and the client address information carried by the picture file, and queries all associated instant messaging tool information and the chat content associated with each instant messaging tool information according to the client address information carried by the query instruction, so that the network manager of a company can conveniently perform instant messaging tool monitoring.
While the present invention has been described with reference to the embodiments shown in the drawings, the present invention is not limited to the embodiments, which are illustrative and not restrictive, and it will be apparent to those skilled in the art that various changes and modifications can be made therein without departing from the spirit and scope of the invention as defined in the appended claims.

Claims (8)

1. A method for monitoring an instant chat application, the method comprising:
when the client monitors that the front end of the desktop displays an instant messaging tool needing to be monitored, the client captures a screen of the current desktop, and the screen capture of the current desktop specifically comprises the following steps: performing screen capturing at intervals of preset time T1, if the image file obtained by screen capturing is different from the previous image file, storing the image file obtained by screen capturing into a local preset file directory, and carrying the instant messaging tool information displayed at the front end of the currently monitored desktop and the acquired client address information in the name of the image file during storage;
the client uploads a picture file obtained by screen capture, instant messaging tool information displayed at the front end of a desktop and client address information to a server, and the method specifically comprises the following steps: scanning a preset file directory once every preset time T2, and if the preset file directory is scanned to find that a new picture file exists in the preset file directory, uploading the newly found picture file to the server side in an FTP transmission mode;
the server receives and stores the picture file uploaded by the client;
the server identifies the received picture file by the picture, and stores the identified chat content, the instant messaging tool information carried by the picture file and the client address information in an associated manner;
and when the server side obtains the query instruction, all the stored instant messaging tool information associated with the client address information carried by the query instruction and the chat content associated with each instant messaging tool information are used as query results.
2. The method of claim 1,
the receiving and storing of the picture file uploaded by the client specifically includes: and receiving the picture file transmitted in the FTP transmission mode, and storing the picture file into a preset picture file receiving directory.
3. The method of claim 1,
the picture recognition is carried out on the received picture file, and the recognized chat content, the instant messaging tool information carried by the picture file and the client address information are stored in an associated mode, and the method specifically comprises the following steps: scanning a preset picture file receiving directory once every preset time T3, if a new picture file exists in the preset picture file receiving directory, extracting instant communication tool information and client address information from the name of the newly found picture file, calling the newly found picture file for picture identification, writing the identified chat content into a text file of an appointed directory, wherein the name of the written text file carries the extracted instant communication tool information and the client address information.
4. The method of claim 3, further comprising:
scanning the appointed directory once every preset time T4, if the appointed directory is scanned to find that a new text file exists in the appointed directory, extracting instant communication tool information and client address information from the name of the newly found text file, opening the newly found text file to read chat content, and storing the extracted instant communication tool information and client address information and the read chat content in a relational database in a correlated manner for being inquired by a WEB server.
5. A monitoring system for instant chat application is characterized by comprising a server and a client;
wherein the client comprises:
a picture capture module configured to: when the fact that the front end of the desktop is monitored to show an instant messaging tool needing to be monitored is monitored, screen capturing is carried out on the current desktop, and the screen capturing carried out on the current desktop specifically comprises the following steps: performing screen capturing at intervals of preset time T1, if the image file obtained by screen capturing is different from the previous image file, storing the image file obtained by screen capturing into a local preset file directory, and carrying the instant messaging tool information displayed at the front end of the currently monitored desktop and the acquired client address information in the name of the image file during storage;
an upload module configured to: uploading the image files obtained by screen capture, the instant messaging tool information displayed at the front end of the desktop and the client address information to a server, specifically, scanning a preset file directory once every preset time T2, and if the preset file directory is scanned to find that new image files exist in the preset file directory, uploading the newly found image files to the server in an FTP transmission mode;
wherein, the server side includes:
a receiving module configured to: receiving and storing picture files uploaded by a client;
an identification module configured to: carrying out picture identification on the received picture file, and storing the identified chat content, instant messaging tool information carried by the picture file and client address information in an associated manner;
a query processing module configured to: and when the query instruction is acquired, all the stored instant messaging tool information associated with the client address information carried by the query instruction and the chat content associated with each instant messaging tool information are used as query results.
6. The system of claim 5,
the receiving module is used for receiving the picture files sent in an FTP transmission mode and storing the picture files into a preset picture file receiving directory;
the identification module is specifically used for scanning a preset picture file receiving directory once at preset time T3, if a new picture file exists in the preset picture file receiving directory, extracting instant communication tool information and client address information from the name of the newly found picture file, calling the newly found picture file for picture identification, writing the identified chat content into a text file of an appointed directory, wherein the name of the written text file carries the extracted instant communication tool information and client address information.
7. The system of claim 6, wherein the query processing module is further configured to: scanning the appointed directory once every preset time T4, if the appointed directory is scanned to find that a new text file exists in the appointed directory, extracting instant communication tool information and client address information from the name of the newly found text file, opening the newly found text file to read chat content, and storing the extracted instant communication tool information and client address information and the read chat content in a relational database in a correlated manner for being inquired by a WEB server.
8. A monitoring system for instant chat application is characterized in that the system comprises a server and a client,
the processor of the client is configured to perform the steps of: when the fact that the front end of the desktop shows that an instant messaging tool which needs to be monitored is monitored, screen capturing is carried out on the current desktop; uploading the picture file obtained by screen capture, the instant messaging tool information displayed at the front end of the desktop and the client address information to a server;
the processor of the server is configured to: receiving and storing picture files uploaded by a client; carrying out picture identification on the received picture file, and storing the identified chat content, instant messaging tool information carried by the picture file and client address information in an associated manner; when a query instruction is obtained, all instant messaging tool information which is stored and is associated with client address information carried by the query instruction and chat content which is associated with each instant messaging tool information are used as query results;
the screen capturing of the current desktop specifically comprises: performing screen capturing at intervals of preset time T1, if the image file obtained by screen capturing is different from the previous image file, storing the image file obtained by screen capturing into a local preset file directory, and carrying the instant messaging tool information displayed at the front end of the currently monitored desktop and the acquired client address information in the name of the image file during storage;
uploading the shot picture file, the instant messaging tool information displayed at the front end of the desktop and the client address information to a server, and the method specifically comprises the following steps: scanning the preset file directory once every preset time T2, and if the scanning finds that a new picture file exists in the preset file directory, uploading the newly found picture file to the server side in an FTP transmission mode.
CN201911237290.0A 2019-12-05 2019-12-05 Instant chat application monitoring method and system Active CN111049731B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201911237290.0A CN111049731B (en) 2019-12-05 2019-12-05 Instant chat application monitoring method and system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201911237290.0A CN111049731B (en) 2019-12-05 2019-12-05 Instant chat application monitoring method and system

Publications (2)

Publication Number Publication Date
CN111049731A CN111049731A (en) 2020-04-21
CN111049731B true CN111049731B (en) 2021-12-03

Family

ID=70234777

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201911237290.0A Active CN111049731B (en) 2019-12-05 2019-12-05 Instant chat application monitoring method and system

Country Status (1)

Country Link
CN (1) CN111049731B (en)

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2021237387A1 (en) * 2020-05-23 2021-12-02 游戏橘子数位科技股份有限公司 Method for recording and notifying picture capture
CN111757058A (en) * 2020-06-18 2020-10-09 浪潮金融信息技术有限公司 Method for monitoring non-existing equipment screen
CN112307386A (en) * 2020-10-29 2021-02-02 北京明略昭辉科技有限公司 Information monitoring method, system, electronic device and computer readable storage medium
CN113656793B (en) * 2021-08-13 2023-06-23 展讯通信(上海)有限公司 Method and device for monitoring instant messaging program on terminal, storage medium and terminal
CN117914919B (en) * 2024-03-20 2024-05-24 江苏中威科技软件***有限公司 Device for detecting communication tool in OFD file

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102075450A (en) * 2009-11-19 2011-05-25 北京明朝万达科技有限公司 Utility method for recording chatting content of instant messaging device
CN103500095A (en) * 2013-09-27 2014-01-08 太仓苏易信息科技有限公司 Screen shot monitoring system
CN105573577A (en) * 2014-10-15 2016-05-11 航天信息股份有限公司 Remote monitoring method, device and system
CN106603540A (en) * 2016-12-21 2017-04-26 北京天融信网络安全技术有限公司 Method and device for monitoring instant communication information
CN107911388A (en) * 2017-12-13 2018-04-13 广州泰尔智信科技有限公司 Supervise the method and system of mobile terminal application
CN109032726A (en) * 2018-06-29 2018-12-18 北京明朝万达科技股份有限公司 The acquisition methods and device of chat message

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20090245500A1 (en) * 2008-03-26 2009-10-01 Christopher Wampler Artificial intelligence assisted live agent chat system
US10198140B2 (en) * 2012-12-20 2019-02-05 Dropbox, Inc. Systems and methods for facilitating communication between users of a content management service
US20180330385A1 (en) * 2017-05-15 2018-11-15 Atlas Certified, LLC Automated and distributed verification for certification and license data
KR20190034759A (en) * 2017-09-25 2019-04-03 삼성에스디에스 주식회사 Method for managing messenger picture, apparatus and system for executing the method
CN109710360A (en) * 2018-12-26 2019-05-03 王婧 A kind of chat record sending method

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102075450A (en) * 2009-11-19 2011-05-25 北京明朝万达科技有限公司 Utility method for recording chatting content of instant messaging device
CN103500095A (en) * 2013-09-27 2014-01-08 太仓苏易信息科技有限公司 Screen shot monitoring system
CN105573577A (en) * 2014-10-15 2016-05-11 航天信息股份有限公司 Remote monitoring method, device and system
CN106603540A (en) * 2016-12-21 2017-04-26 北京天融信网络安全技术有限公司 Method and device for monitoring instant communication information
CN107911388A (en) * 2017-12-13 2018-04-13 广州泰尔智信科技有限公司 Supervise the method and system of mobile terminal application
CN109032726A (en) * 2018-06-29 2018-12-18 北京明朝万达科技股份有限公司 The acquisition methods and device of chat message

Also Published As

Publication number Publication date
CN111049731A (en) 2020-04-21

Similar Documents

Publication Publication Date Title
CN111049731B (en) Instant chat application monitoring method and system
CN109033471B (en) Information asset identification method and device
CN111818024B (en) Network asset information collecting and monitoring system
CN105138709B (en) Remote evidence taking system based on physical memory analysis
CN109361525B (en) Method, device, control terminal and medium for restarting distributed deployment of multiple services
CN108347698B (en) Online and offline activity track analysis method, device and system
CN108093026B (en) Method and device for processing multi-tenant request
US10142359B1 (en) System and method for identifying security entities in a computing environment
CN115865525B (en) Log data processing method, device, electronic equipment and storage medium
CN115883223A (en) User risk portrait generation method and device, electronic equipment and storage medium
CN105323128B (en) method, device and system for accessing front-end equipment to server
CN109245963A (en) The recognition methods of network terminal type and relevant device
CN103648003A (en) Television set, and processing method and apparatus for remote memory equipment
CN113660134A (en) Port detection method, device, electronic device and storage medium
CN108550040A (en) A kind of electronic evidence acquisition method and system based on throwing screen display
US9516023B2 (en) System and method for transferring electronic information
Chen et al. Forensic analysis of email on android volatile memory
CN110620682B (en) Resource information acquisition method and device, storage medium and terminal
CN110266562B (en) Method for automatically detecting identity authentication function of network application system
CN114039776A (en) Method and device for generating flow detection rule, electronic equipment and storage medium
CN108833125B (en) Drawing method, system, computer equipment and storage medium for restoring voice speech path
CN111625807A (en) Equipment type identification method and device
Kaushik et al. Forensic Analysis of WhatsApp chat data
Hintea et al. Forensic analysis of the telegram instant messenger application on android devices
CN112073258B (en) Method for identifying user, electronic equipment and storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant