Method and apparatus for defending against network attacks

Abstract

The invention aims at providing a method and an apparatus for defending against network attacks. The method comprises the steps of obtaining an access request of a user device to a target page, detecting whether the access request triggers defensive strategy information corresponding to the target page, performing verification processing on the user device corresponding to the access request triggering the defensive strategy information and returning the target page to the user device passing the verification processing. Compared with the prior art, the defensive strategy information involved in the method comprises a plurality of flexibly configurable defensive strategies and the verification processing can be implemented in a plurality of flexibly configurable verification modes to meet the requirements under different circumstances and enhance the experience of users. Furthermore, the method is capable of visually displaying the running conditions and providing support for the optimization of the defensive strategy information by collecting various running indices in real time, displaying attack logs in real time and generating a graphic report according to the collection result, thereby further enhancing he experience of the users.

Description

Technical field [0001] This application relates to the computer field, and in particular to a technology for defending against network attacks. Background technique [0002] With the advent of the Web2.0 era, a series of new Internet products such as social networking, e-commerce, and online games were born. Internet applications based on the Web environment are becoming more and more extensive. In the process of enterprise informatization, various applications are set up on the Web. on the platform. However, the rapid development of Web services has also attracted strong attention from hackers, and network security issues have become increasingly prominent. DDoS (Distributed Denial of Service, Distributed Denial of Service) attacks are developing toward larger, stronger, faster, and smarter trends. [0003] As a DDoS attack against Web server resources, CC (Challenge Collapsar, challenge black hole) attacks have received more and more attention in recent years. The principle of...

AI Technical Summary

Problems solved by technology

[0005] However, the existing technologies for defending against CC attacks generally have the following problems: (1) they cannot be implemented in real time, and most web servers only print relevant logs when the request processing ends. When CC attacks are detected through log analysis, Maybe the website has been down and paralyzed; (2) The defense strategy is limited and difficult to use universally; (3) The operation is complicated and not intuitive and flexible, which is easy to cause accidental killing and affect normal user access; (4) Some HTTP variables (such as user-agent, http -x_forwarded-for, etc.) are easily forged by attackers, and attackers only need to slightly modify the attack program to deceive the server, which does not play a defensive role; (5) the verification method is easy to be penetrated by attackers, and attacks cannot be prevented ; (6) Real-time attack data cannot be counted (such as the number of attacks, attack time, etc.)

Images