Security protection method and security protection system based on WEB access compliance auditing

Abstract

The invention relates to the technical field of network security protection, and aims to provide a security protection method and a security protection system based on WEB access compliance auditing. The security protection method based on WEB access compliance auditing comprises the following steps: a main device self-learns the full path of a protected Web site; the main device generates a complete Web path compliance model according to the learned Web site path features; when receiving an access request of a client to the Web site, the main device records the information of the access request in a record table; and a compliance engine uses the Web path compliance model to analyze and evaluate the access request. The security protection system comprises a main device and a compliance engine. According to the invention, the full path of a site can be audited and a compliance model can be dynamically generated, so that unsafe behaviors on the network can be intelligently evaluated and defended, network access behaviors of users can be regularized, and the attack misjudgment rate can be effectively reduced.

Description

technical field [0001] The invention relates to the technical field of network security protection, in particular to a security protection method and system based on WEB access compliance audit. Background technique [0002] With the rapid development of the Internet, the security of Web applications has become a hot topic in Internet research. [0003] As an active security protection technology, web application security protection can be used not only as an auditing and access control device, but also for architecture and network design and web application reinforcement, and can provide real-time protection against unsafe behaviors from the Internet. These unsafe behaviors include injection attacks, webpage tampering incidents, information leakage incidents, website hotlinking incidents, information theft incidents, etc. Traditional WEB application firewalls usually exist as independent hardware gateways, and protect WEB servers in various deployment forms such as transpa...

AI Technical Summary

Problems solved by technology

However, because this technique relies on prior determination of the characteristics of each threat, and most Web sites have their inherent characteristics, this method cannot completely effectively protect Web sites and prevent undisclosed vulnerabilities, and at the same time it will cause serious damage to attacks. misjudgment

Images