Method for preventing Dos aggression of business support system

Abstract

The invention discloses a method of a service supporting system used for preventing Dos attack; when the user initiates service transaction request, the user ID is used to generate a user transaction behavior index counter at the upstream link of request disposal of the service supporting system; during one counting period, when the user transacts the service once by the service supporting system, the corresponding user transaction behavior index counter is counted and then compared with the user transaction behavior threshold; if the count of the counter exceeds the allowance of the threshold, the service request is refused in the link; if the count of the counter does not exceed the allowance of the threshold, the service request is allowed to continue to be processed in the downstream link of the service supporting system. The method starts from the application layer, analyses the normal operation index of the user, utilizes the unusual threshold to judge the attack behavior at the upstream link of the service supporting system, blocks the attack request to be transmitted to the downward request processing system when the Dos attack occurs, thus achieving the purpose of preventing the Dos attacks.

Description

technical field [0001] The invention relates to the technical field of network communication security, in particular to a method for preventing a DoS attack of a business support system. Background technique [0002] With the development of computer technology, the company's business began to gradually integrate with computer software and hardware. According to the company's business model, with the computer system as the core, combined with other software and hardware facilities, the company's business support system was customized. Such as the billing system of the communication industry, the transaction management system of the bank, the transaction and payment system of the website, etc., are all typical business support systems. The security of the business support system is crucial to the company's daily production and business development. [0003] At present, hacker attacks are one of the biggest threats to network security, and DoS (denial of service) attacks are t...

AI Technical Summary

Problems solved by technology

[0008] The above-mentioned prior art's strategy and method for dealing with anti-DoS (denial of service) attacks start from the abnormal flow of the network, and it is easy to block the normal request of the user by mistake while preventing the attack, and for distributed anti-DoS (denial of service) service) attacks, because it is difficult to distinguish between normal user requests and attack requests, these strategies and methods are even more difficult to work, and the above-mentioned technical solutions design the anti-attack system from the network level rather than from the application level, so some temporary activities caused by Abnormal traffic is difficult to adjust quickly and flexibly, and it is even more difficult to flexibly respond to the actual situation of users using services