A url mimic method for protecting web application security

Abstract

The invention discloses a url (uniform resource locator) pseudo method for protecting Web application security. According to the method, a url marking a background Web server source is dynamically changed, the changed url is represented externally, the real url is concealed, and valid visit times can be configured for each changed url. With the adoption of the method, an attacker cannot master a real entrance of resources on the Web server and cannot attempt to attack randomly, and accordingly, the Web application security is protected.

Description

technical field [0001] The invention relates to the technical field of computer network security, in particular to the field of web application security. Background technique [0002] With the birth of a series of new Internet products such as Web2.0, social network, and Weibo, Internet applications based on the Web environment are becoming more and more extensive. In the process of enterprise informatization, various applications are set up on the Web platform. The rapid development of business has also attracted the strong attention of hackers, followed by the emergence of web security threats. Hackers use the loopholes in the website operating system and the SQL injection loopholes in the web service program to gain control of the web server, and at least tamper with the webpage. The serious one is to steal important internal data, and the more serious one is to implant malicious code in the webpage, so that the website visitors are violated. At present, the common means...

AI Technical Summary

Problems solved by technology

[0002] With the birth of a series of new Internet products such as Web2.0, social network, and Weibo, Internet applications based on the Web environment are becoming more and more extensive. In the process of enterprise informatization, various applications are set up on the Web platform. The rapid development of business has also attracted the strong attention of hackers, followed by the emergence of web security threats. Hackers use the loopholes in the website operating system and the SQL injection loopholes in the web service program to gain control of the web server, and at least tamper with the webpage. The serious one is to steal important internal data, and the more serious one is to implant malicious code in the webpage, so that the website visitors are violated

At present, the common means of protecting web application security include firewall, IDS, pattern recognition, URL filtering and other technologies, but these technologies are very passive. Only when an intrusion event occurs, corresponding protection measures are taken against this intrusion. It is often difficult to defend against new attack methods

Images