Defense method for database dragging and collision attack on database layer

Abstract

The invention relates to a defense method for database dragging and collision attack on a database layer. The method includes the steps that a backstage defense module for enticing attack is allocatedin a database, an SQL request is input, and the backstage defense module conducts judgement according to a feedback value of the SQL request; if an attack condition is satisfied, blockage is carriedout; otherwise, the the access is normal, the request is completed and data is returned back to finish the whole process. According to the method, by means of the backstage defense module for enticingthe attack, during actual operation, the input SQL request is responded, whether or not the current SQL is aggressive can be judged, the aggressive SQL is blocked, and data is returned back to normalaccess. According to the method, by setting a backdoor structure on the database directly, the database dragging and collision behaviors of an attacker can be dug out and found out more proactively,intelligently and efficiently to ensure safety of the database.

Description

technical field [0001] The present invention relates to the transmission of digital information, such as the technical field of telegram communication, and in particular to a method for defending against database layer dragging and credentialing attacks in terms of network technology and database security protection technology. Background technique [0002] With the rapid development of the Internet and mobile Internet, more and more applications are connected to the network, making more and more people appreciate the convenience it brings, and people's work, life, and entertainment are gradually inseparable from the network. [0003] However, most of the network application services that people use are based on the web. These web systems contain a large amount of user data. Once the data is leaked, it will not only bring huge losses to the user's spirit and economy, but also to the service provider. Negative impact on operators. This mainly includes credential stuffing att...

AI Technical Summary

Problems solved by technology

[0004] The traditional methods of defense against database dragging and database collision are hierarchical management of passwords, regular password modification, website vulnerability detection, real-time monitoring of website hanging horses and real-time monitoring of website tampering, etc., but these methods do not protect the database