Method and device for intercepting web attacks, and customer premise equipment

The invention discloses a method and a device for intercepting web attacks, and customer premise equipment, solving the problem that the web attacks come round intercept of black and white lists through an action command running program, and finally a rogue program is successfully carried out, wherein the method comprises the following steps: obtaining a program of a browser execution process; detecting whether the program of the browser execution process is the command running program; when the program of the browser execution process is the command running program, obtaining a command running parameter of the command running program; analyzing the command running parameter of the command running program, detecting whether a malicious command running parameter exists in the command running program; and when the malicious command running parameter exists in the command running program, preventing execution of the process. According to the method and the device, the security of browsing a webpage is improved,