Network attack defense method, device and system

Abstract

The invention provides a network attack defense method, device and system. According to the method, bypass inspection equipment intercepts an access request sent to a server in a service system, and redirects a client sending the access request to an authentication server, so as to authenticate the verification code of the client through the authentication server; and when it is determined that the client passes the verification of the authentication server, the access request sent by the client is forwarded to the server in the service system. Through adoption of the method, the service system can defend malicious attack behaviors like DDoS more flexibly and conveniently.

Description

technical field [0001] The present application relates to the field of network technology, in particular to a network attack defense method, device and system. Background technique [0002] With the continuous advancement of network technology, there are more and more network attacks in the network field. At present, distributed denial of service attack (Distributed Denial of Service, DDoS) has become a relatively serious attack method in many network attacks. A more common DDoS attack method is maliciously frequently initiating access requests to targets (eg, servers) that need to be attacked, so as to occupy too many service resources, so that legitimate users cannot get service responses. [0003] In order to defend against DDOS, it is necessary to configure the verification code verification mechanism in the server in advance, so that the server can start the verification code verification function. After the server starts the verification code verification function, i...

AI Technical Summary

Problems solved by technology

However, a large number of servers are generally deployed in service systems such as cloud platforms or distributed servers. If multiple or even all servers in the service system need to defend against DDoS, it is necessary to deploy verification code verification mechanisms on multiple servers. , leading to high complexity in defense against DDoS; moreover, once the verification code verification logic in a certain server needs to be changed, the service provided by the server needs to be interrupted, and then the verification logic can be modified in the server, which is less flexible

Images