Web application firewall and web application safety protection method

Abstract

The invention discloses a web application firewall and a web application safety protection method. The web application firewall comprises a center firewall node and a plurality of auxiliary firewall nodes, wherein the center firewall node receives a request sent by a network user to a protection target website and transmits the request to one of the plurality of the auxiliary firewall nodes according to a certain rule, and the auxiliary firewall nodes conduct safety detection to the received request to prevent or allow the visitation of the request to the protection target website. The web application safety protection method comprises that the center firewall node receives the request sent by the network user to the protection target website and transmits the request to one of the plurality of the auxiliary firewall nodes according to the certain rule, and the auxiliary firewall nodes conduct safety detection to the received request to prevent or allow the visitation of the request to the protection target website. According to the technical scheme, the problem of service interrupt caused by single node error can be prevented.

Description

Technical field [0001] The present invention generally relates to the field of cloud security protection for Web site groups, and in particular to a Web application firewall and a WEB application security protection method. Background technique [0002] The biggest challenge facing current network security lies in how to mitigate various security threats to WEB services, how to efficiently ensure the availability and reliability of WEB applications, how to optimize business resources and improve the agility of application systems, etc. In the face of such problems, foreign and domestic countries have formulated and promoted the corresponding PCI DSS security standards, the Ministry of Public Security Order No. 82, and also derived corresponding WEB application firewalls, webpage anti-tampering technologies, and so on. [0003] WEB Application Firewall (WEB Application Firewall, also known as website application-level intrusion prevention system). WEB application firewall is a prod...

AI Technical Summary

Problems solved by technology

[0009] The bridging method is to use embedded software to install the WEB application firewall in the operating system of the WEB application server, and take over all HTTP requests received by the system. This method is limited to the type of operating system and WEB service software, and can only Install and deploy within the compatible scope of the software, and there may be a risk of conflict with other software in the operating system

[0010] 2. Hardware device bridging

On the other hand, not being in the traffic path means that this solution cannot perform the kind of blocking that an active bridging deployment can do

Images