Security defense system based on network acceleration equipment

Abstract

The invention discloses a security defense system based on network accelerating equipment. The system aims to effectively protect various web sites purchasing network accelerating service. The technical scheme provided by the invention is that: the system comprises a system rule base module, a system decision module, a system intrusion detection module and a system feedback module, wherein the system rule base module initializes rule base files aiming at web attack; the system decision module registers a decision algorithm required by security detection; the system intrusion detection module receives a request from a web application program client, performs content detection and verification on the request according to the decision algorithm in the system decision module so as to guarantee the security of the request, and then transmits a detection result to the system feedback module; and if the request meets the security requirement, the system feedback module allows the request to directly access the next flow after security defense, and if the request cannot meet the security requirement, the system feedback module adopts corresponding defending measures.

Description

Technical field [0001] The invention relates to a computer network web security field, in particular to a system that adds a layer of web security defense to a network acceleration product, so as to achieve the purpose of defending client sources from being attacked. Background technique [0002] Computer networks are rapidly spreading in various fields of economy and life, and the whole society is increasingly dependent on the network. The network has become a powerful driving force for social and economic development, and its status is becoming more and more important. With the development of the network, various problems have also arisen, among which security problems are particularly prominent. Due to the inherent openness of the system network, the security loopholes in the network protocol itself, the imperfections of various software or the artificially set "backdoors", the incorrect settings of the network managers and the illegal operations of the internal personnel, et...

AI Technical Summary

Problems solved by technology

Anomaly detection can only identify those behaviors that deviate greatly from the normal process. Due to the poor adaptability to various network environments and the lack of accurate judgment standards, anomaly detection often causes false positives and other phenomena, which leads to High false positive rate for anomaly detection

Images