Alarm method for script injection attack and alarm system

Abstract

The invention discloses an alarm method of script injection attack and an alarm system. The method is realized according to a Web service system comprising a plurality of servers, each server comprises a preset random tag and an application source code obtained after an original application source code is preprocessed according to the random tag; the random tag of each server is different from random tags of other servers, so that the application source codes obtained after the same application source code is preprocessed according to the random tags of all the servers are different; during the subsequent use, a received access request is copied to be a plurality of access requests, and whether the Web service system is subjected to script injection attack is judged according to response results of all the servers, so that purposes of identification and alarm about the script injection attack of known and unknown malicious scripts are achieved.

Description

technical field [0001] The present application relates to the field of computer application technology, and more specifically, to a warning method and warning system for script injection attacks. Background technique [0002] In today's network environment, the web (World Wide Web) service system, as an important service bearing and providing platform, is a virtual representative of the government, enterprises and individuals on the Internet, and brings together massive value information, such as user information, enterprise data, financial The importance of financial information, business secrets, intellectual property information, and customer order information is self-evident. Therefore, attacks on Web services have become the main attack direction of network hackers. However, in the current network environment of Web services, quite a lot of software has various known and unknown vulnerabilities and backdoors, which provide convenient attack paths for attackers. Attack...

AI Technical Summary

Problems solved by technology

At present, most of the defense methods against malicious script attacks adopt the method of characteristic filtering, mainly to identify malicious scripts by setting the general characteristics of malicious scripts, but this method needs to set as many general characteristics of malicious scripts as filtering rules , to improve the identification success rate of malicious scripts, but there is still no filtering function for malicious scripts outside the filtering rules, that is to say, the defense method against script injection attacks in the prior art can only identify script injection of known malicious scripts attack, but cannot identify unknown malicious script script injection attack

Images