Server fingerprint mimicry and sensitive information mimicry method based on WEB security gateway

Abstract

The invention discloses a server fingerprint mimicry and sensitive information mimicry method based on a WEB security gateway. The method comprises the following steps: returning information mimicry when an attacker scans Web server fingerprint information and bug information to confuse effective information acquired by the attacker; and after the attacker finishes the attacking through the bug, performing mimicry substitution on the sensitive information acquired by the attacker through the sensitive information mimicry to prevent the sensitive information from being leaked. Compared with the traditional Web security gateway, the method disclosed by the invention can confuse the seeing and hearing of the attacker before the attacking, and can interfere the acquisition of the sensitive information after the attacking is finished; the security gateway can be flexibly configured and is transparent facing to the normal user, and has good expandability and portability.

Description

technical field [0001] The invention relates to the technical field of computer network security, in particular to the Web application security gateway technology. Background technique [0002] In Tsuda, where the Internet penetration rate is getting higher and higher, the Internet has become ubiquitous in daily life. From the PC era to the mobile Internet era to the future Internet of Things era, the convenience and speed brought by the Internet have already benefited people greatly. However, whether it is the vast number of Internet users or IT companies, the emphasis on network security has not been able to prevent it before it happens, and most of the cases are "remedy". In recent years, various attacks on the network have occurred frequently, which has sounded the alarm for network security. Although people have adopted various methods and tools to strengthen the security of network communication, the number of successful attacks is still increasing. The relatively "f...

AI Technical Summary

Problems solved by technology

In the face of new attack methods that continue to emerge, traditional passive defense methods are becoming more and more powerless, lacking a proactive response method, often responding only after the system is attacked, and such defenses are always launched after the attack occurs. Make remedial measures; just like this, the mimic security gateway is a new type of security gateway proposed based on this situation, in order to obtain a favorable defense posture from initiative, variability and randomness

Images