A method performed by one or more processors configured with computer-executable instructions, the method comprising: receiving a request to visit a webpage from a web browser when a user requests to visit the webpage through the web browser, the request to visit the webpage including web address information of the webpage; receiving (302, 530) information of a user's operation behavior on the webpage, wherein the operation behavior includes mouse operation information, keyboard operation information, and operation flow information, and wherein further the receiving information of the user's operation behavior (532, 534, 536) on the webpage comprises: searching (106, 512) webpage codes corresponding to the webpage based on the web address information; inserting retrieval instructions, for retrieving behavior collection instructions from a web server, into the webpage codes; sending (108, 304, 516) the webpage codes including the retrieval instructions to the web browser; after receiving a retrieval request from the web browser to retrieve the behavior collection instructions based on the retrieval instructions, performing obfuscation computing of the behavior collection instructions based on a preset obfuscation algorithm and sending the obfuscated behavior collection instructions to the web browser; and receiving the information of the user's operation behavior (532, 534, 536) on the webpage that are collected by the web browser based on the behavior collection instructions; calculating (306, 544) a weighted value of machine behavior based on the information of the user's operation behavior (532, 534, 536); determining (308, 546) whether the user's operation behavior (532, 534, 536) is a machine behavior based on the weighted value of machine behavior; and if the weighted value of machine behavior is no less than a defined threshold, determining (308, 546) that the user's operation behavior (532, 534, 536) is machine behavior. receiving a request to visit a webpage from a web browser when a user requests to visit the webpage through the web browser, the request to visit the webpage including web address information of the webpage; receiving (302, 530) information of a user's operation behavior on the webpage, wherein the operation behavior includes mouse operation information, keyboard operation information, and operation flow information, and wherein further the receiving information of the user's operation behavior (532, 534, 536) on the webpage comprises: searching (106, 512) webpage codes corresponding to the webpage based on the web address information; inserting retrieval instructions, for retrieving behavior collection instructions from a web server, into the webpage codes; sending (108, 304, 516) the webpage codes including the retrieval instructions to the web browser; after receiving a retrieval request from the web browser to retrieve the behavior collection instructions based on the retrieval instructions, performing obfuscation computing of the behavior collection instructions based on a preset obfuscation algorithm and sending the obfuscated behavior collection instructions to the web browser; and receiving the information of the user's operation behavior (532, 534, 536) on the webpage that are collected by the web browser based on the behavior collection instructions; searching (106, 512) webpage codes corresponding to the webpage based on the web address information; inserting retrieval instructions, for retrieving behavior collection instructions from a web server, into the webpage codes; sending (108, 304, 516) the webpage codes including the retrieval instructions to the web browser; after receiving a retrieval request from the web browser to retrieve the behavior collection instructions based on the retrieval instructions, performing obfuscation computing of the behavior collection instructions based on a preset obfuscation algorithm and sending the obfuscated behavior collection instructions to the web browser; and receiving the information of the user's operation behavior (532, 534, 536) on the webpage that are collected by the web browser based on the behavior collection instructions; calculating (306, 544) a weighted value of machine behavior based on the information of the user's operation behavior (532, 534, 536); determining (308, 546) whether the user's operation behavior (532, 534, 536) is a machine behavior based on the weighted value of machine behavior; and if the weighted value of machine behavior is no less than a defined threshold, determining (308, 546) that the user's operation behavior (532, 534, 536) is machine behavior.