A network application layer security protection system

Abstract

The invention discloses a network application layer security protection system, which comprises a message parsing module for judging and parsing the message, comprising SSL decryption, encoding and decoding standard normalization processing and message field information extraction, and then sending the extracted message characteristics to a detection module for attack detection; and a message parsing module for judging and parsing the message. The detection module comprises a filter, a black-and-white list detection module and a feature matching module. The behavior analysis module is used forverifying the DDoS attack to the message characteristic data passing through the detection module and outputting the verified message to the Web server. The log audit module is used for auditing behaviors and exceptions in the process of Web protection. In the process of feature analysis and matching, the behaviors of Web mail uploading, SMTP and FTP data transmission are transmitted to the log audit module for recording and analysis. In the process of security protection, the access records violating policies and rules are recorded.

Description

technical field [0001] The invention belongs to the technical field of network security, in particular to a network application layer security protection system. Background technique [0002] With the rapid development of the network, Web services, with its unique efficiency, ease of use and timeliness, have led a large number of organizations to transfer their business to the Web application layer. E-commerce, e-government, online banking and social networking sites all use Web applications. Web applications become an indispensable part of people's lives. However, with the rapid development of Web applications, the security situation is not optimistic, and the security risks from the Web layer are getting higher and higher. According to statistics, 75% of network attacks occur at the Web application layer. What is more serious is that traditional security protection measures (network firewall, IDS / IPS and anti-virus software) cannot effectively prevent attacks at the Web a...

AI Technical Summary

Problems solved by technology

However, with the rapid development of web applications, the security situation is not optimistic, and the security risks from the web level are getting higher and higher

According to statistics, 75% of network attacks occur at the Web application layer. What is more serious is that traditional security protection measures (network firewall, IDS / IPS and anti-virus software) cannot effectively prevent attacks at the Web application layer, and the Web application layer Defense means become the best weapon to protect against web application layer attacks

Images