Method and system for preventing robot attack

Abstract

The invention provides a method and system for preventing a robot attack. The method comprises: receiving a transaction request initiated by a user; acquiring a configuration parameter of the transaction request and determining whether the transaction request is subjected to access control according to the configuration parameter; if so, acquiring an access control rule corresponding to the transaction request; on the basis of the access control rule, determining whether the number of times of access of the transaction request reaches an allowable access upper limit within a preset period; andif so, the transaction request is refused. Therefore, control for a single client or a single session is realized; the control granularity becomes fine and accurate; and thus the program attack froma robot can be prevented completely.

Description

technical field [0001] The invention relates to the technical field of network data communication security, in particular to a method and system for preventing robot attacks. Background technique [0002] With the development of Internet finance, more and more financial services can be completed online without leaving home. The amount of network information and visits is showing a trend of massive growth, and the financial system is under enormous access pressure. If the frequency and effective time of user requests cannot be controlled, users can request transactions frequently at any time, which will easily lead to excessive pressure on the background server and network congestion. In a more serious situation, in the face of some malicious access attacks (such as robot programs), when a large number of concurrent requests are initiated in a short period of time, it will inevitably cause serious consequences such as exhaustion of server resources or even downtime. [0003...

AI Technical Summary

Problems solved by technology

If the frequency and effective time of user requests cannot be controlled, users can request transactions frequently at any time, which will easily lead to excessive pressure on the background server and network congestion

In more serious cases, in the face of some malicious access attacks (such as robot programs), when a large number of concurrent requests are initiated in a short period of time, it is bound to cause serious consequences of exhaustion of server resources or even downtime

[0003] Existing access control technologies, some use webserver (web server) to limit the number of connections, and some use to control network bandwidth traffic

However, there are the following disadvantages: the number of http connections is used to limit, the system can only be protected on the number of access connections, and the frequency cannot be controlled for a certain session (session)

For example, the robot attack program does not need to occupy a lot of connections, but it will initiate transactions at a high frequency, far exceeding the frequency of human interaction

Images