ip defense method

Abstract

The invention relates to an Ip defense method which is characterized by comprising the following steps: collecting non-invasive access data, analyzing the data every minute, establishing blacklist and white-list mechanisms, separately setting rules according to the HTTP protocol, acquiring blacklist data analysis through independent service, and denying service. Thus, data is captured by a network card sniffing service when an HTTP requests to enter a website server providing service, and after a certain amount of data is accumulated, the data is sent to an analysis queue. Meanwhile, an analysis service takes data out of the queue and processes the data to get a blacklist. Next time when the IP requests to access a website, a blacklist can be acquired in an Http Module of .net, and access is denied after judgment. More importantly, by adopting a processing method different from the traditional firewall, performance loss is avoided to the maximum, and tedious rule setting is reduced.

Description

technical field [0001] The invention relates to a network defense method, in particular to an Ip defense method. Background technique [0002] From the perspective of existing network technologies, domain names and interface addresses exposed on the public network are vulnerable to malicious access attacks or crawling by competitors' crawlers. It not only brings a bad experience to website services and interface services, but also brings instability risks to the website. To address the above problems, common firewalls use filtering and interception methods, which have a single method and are complicated to maintain. They also have a certain impact on access speed and other performance, and cannot meet the processing of large amounts of data. Contents of the invention [0003] The purpose of the present invention is to provide an Ip defense method in order to solve the above-mentioned problems in the prior art. [0004] The purpose of the present invention is achieved thr...

AI Technical Summary

Problems solved by technology

[0002] From the perspective of existing network technologies, domain names and interface addresses exposed on the public network are vulnerable to malicious access attacks or crawling by competitors' crawlers

It not only brings a bad experience to website services and interface services, but also brings instability risks to the website

To address the above problems, common firewalls use filtering and interception methods, which have a single method and are complicated to maintain. They also have a certain impact on access speed and other performance, and cannot meet the processing of large amounts of data.