HTTP DDOS defense method based on URL dynamic mapping

Abstract

The invention discloses an HTTP DDOS defense method based on URL dynamic mapping. The HTTP DDOS defense method comprises the following steps: when a user visits a protected page, the IP and URL addresses are taken as parameters, real-time interaction with a database is carried out, and the mapping address is obtained from the database; the mapping address is sent to the client; the client uses the mapping address to request a dynamic URL defense server to re-visit; a WEB server receives the request, analyzes the mapping address, visits through the mapping address generated in real time, and the resource response is acquired if the mapping address corresponds. Compared with the prior art, through the URL dynamic mapping technology, when an attacker attacks, the attack resource cannot be accurately located, so that a normal user can effectively visit the application-level source, and the attack resistance of application-level HTTP service is improved; the attacker is prevented from attacking through a unitary code.

Description

technical field [0001] The invention proposes a defense method based on URL dynamic mapping for common HTTP service DDOS attacks with obvious attack effects. Background technique [0002] With the rapid development of network applications, attackers gradually shift their attack targets to applications or services on the network, that is, launching application-layer distributed denial-of-service attacks (APP-DDOS). Due to the diversity and complexity of application layer protocols, application layer DDoS attacks are difficult to detect and defend against. Therefore, the harm caused by APP-DDOS attacks is far greater than that of traditional DDOS attacks. Currently, the most common application-layer distributed denial-of-service attacks are HTTP DDOS attacks. [0003] At present, most of the researches on the above-mentioned APP-DDOS attack defense technologies focus on the identification and filtering of the attack flow when it arrives, and the research on the attack target ...

AI Technical Summary

Problems solved by technology

[0003] At present, most of the researches on the above-mentioned APP-DDOS attack defense technology focus on the identification and filtering of the attack flow when it arrives, and the research on the defense of the attack target (i.e. take relevant measures to protect resources before the attack flow arrives, so that the attacker cannot Accurately locate the attack target) less

Images