Warning system of database-hit attack

Abstract

This invention discloses a warning system of a database-hit attack. The warning system is used for finding a database-hit attack of an application server in the internet. The warning system of the database-hit attack comprises a client, an application server, a network device and a database-hit attack analyzing device, wherein the client is connected with the network device through the internet; the network device is connected with the application server and the database-hit attack analyzing device; the network device is used for performing a mirroring process to communication data transmitted between the client and the application server so as to generate mirror data corresponding to the communication data, and sending the mirror data to the database-hit attack analyzing device; the database-hit attack analyzing device is used for acquiring the mirror data from the network device; a user access action corresponding to the communication data is acquired according to the mirror data; according to the user access action, judge whether the application server is suffering the database-hit attack or not; if so, a warning is sent in real time.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to an alarm system for credential stuffing attacks. Background technique [0002] In recent years, incidents of credential stuffing attacks targeting Internet applications and stealing a large amount of user private information have emerged in an endless stream. Hackers collect leaked user and password information on the Internet, generate corresponding dictionary tables, and try to log in to other websites in batches to obtain a series of user names and account passwords that can be logged in. Therefore, hackers can try to log in by obtaining the user's account on a website Another website, this is a credential stuffing attack. According to existing network security products, it is difficult to detect and warn in time when an application server is under a credential stuffing attack. Contents of the invention [0003] The object of the present invention is to provide an alarm s...

AI Technical Summary

Problems solved by technology

Hackers collect leaked user and password information on the Internet, generate corresponding dictionary tables, and try to log in to other websites in batches to obtain a series of user names and account passwords that can be logged in. Therefore, hackers can try to log in by obtaining the user's account on a website Another website, this is a credential stuffing attack, and according to existing network security products, it is difficult to detect and warn in time when an application server is under a credential stuffing attack

Images