Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Bypass WEB (World Wide Web) application pre-alarm system and method based on nginx

An early warning system and bypass technology, applied in the transmission system, digital transmission system, electrical components, etc., can solve the problems of insufficient scalability, poor stability, and low performance, and achieve high performance, convenient development, and easy expansion Effect

Active Publication Date: 2016-03-23
FUZHOU BOKE WANGAN INFORMATION TECH CO LTD
View PDF4 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] 1. The performance is not high
[0006] 2. The stability is not strong
[0007] 3. Insufficient scalability

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Bypass WEB (World Wide Web) application pre-alarm system and method based on nginx
  • Bypass WEB (World Wide Web) application pre-alarm system and method based on nginx
  • Bypass WEB (World Wide Web) application pre-alarm system and method based on nginx

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0042] see figure 1 , a bypass WEB application early warning system based on nginx, including driver layer 1 and application layer 2, driver layer 1 is responsible for capturing the underlying data packets, and calls back the application layer 2 interface every time there is a data packet. Application layer 2 implements WEB application early warning.

[0043] The application layer 2 includes a simulation module 3 and an nginx service module 4.

[0044] The simulation module 3 includes a server 5 and a client 6, and the server 5 and the client 6 establish a data connection with the nginx service module 4 respectively.

[0045] Wherein, the nginx service module 4 includes an ssl submodule for directly supporting https applications.

Embodiment 2

[0047] A kind of nginx-based bypass WEB application early warning method comprises the system described in embodiment 1, and it comprises the following steps carried out in sequence:

[0048] Step S1: the driver layer 1 grabs the data request message;

[0049] Step S2: the driver layer 1 calls back the application interface of the client 6, and the client 6 establishes a connection 4 with the nginx service module according to the source IP and destination IP of the message, and the nginx service module 4 acts as a proxy server according to the destination IP port , to establish a connection with the server 5;

[0050] Step S3: After the driver layer 1 captures the data response message, it also calls back the application interface of the client 6, and the server 5 sends a response to the nginx service module 4.

Embodiment 3

[0052] A kind of nginx-based bypass WEB application early warning method comprises the system described in embodiment 1, and it comprises the following steps carried out in sequence:

[0053] Step S1: if figure 2 Shown: the nginx-based bypass WEB application early warning system is deployed in bypass mode and connected to the mirror port of the switch;

[0054] Step S2: the nginx-based bypass WEB application early warning system receives all mirror traffic on the switch, including all requests and responses connected to the switch;

[0055] Step S3: the nginx-based bypass WEB application early warning system detects the legitimacy of all requests and responses connected to the switch;

[0056] Step S4: The nginx-based bypass WEB application warning system makes a corresponding warning prompt.

[0057] This deployment method can protect multiple hosts at the same time, but it requires the support of the mirror port of the switch.

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention relates to a bypass WEB application pre-alarm system based on nginx, comprising a drive layer and an application layer; the drive layer is responsible for grabbing a bottom layer data packet and carrying out callback of the interface of the application layer when there is a data packet; the application layer realizes WEB application pre-alarm; the application layer comprises an analog module and an nginx service module; the analog module comprises a server and a customer; the server and the customer respectively build data connection with the nginx service module; the system can efficiently and flexibly detect a web application attack so as to satisfy different security needs of different users, therefore protection strategies are more effective; the other purpose of the invention is providing a bypass WEB application pre-alarm method based on nginx.

Description

technical field [0001] The invention relates to an application early warning system and method, in particular to an nginx-based bypass WEB application early warning system and method, which are mainly used in network security intrusion detection and belong to the field of wireless communication networks. Background technique [0002] The WEB application early warning system is a bypass mode of the WEB application protection system. The main functions of the two are the same, but the usage scenarios are different. Both have their own advantages and disadvantages. The WEB application protection system is generally connected in series between the client and the server, and it is difficult to guarantee that the business of the production system will not be affected 100%. However, the bypass early warning system is deployed in bypass mode, connected to the mirror port of the switch, and reads the mirror data, which can guarantee that it will not affect production business. Corre...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): H04L12/24H04L29/06H04L29/08
CPCH04L41/06H04L63/168H04L67/02H04L67/56
Inventor 王琦郑杭吴健刚
Owner FUZHOU BOKE WANGAN INFORMATION TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products