Security access control and network access rule generation method, device and equipment

Abstract

The embodiment of the invention discloses a security access control and a network access rule generation method, device and equipment. The method comprises the steps: obtaining a target access requestlog corresponding to an access request that is currently allowed to access a network when an update condition of the network access rule is met; generating a network access rule based on the target access request log, and updating the current network access rule according to the generated network access rule; performing security access control of the received network access request based on the updated network access rule. Through the embodiment of the invention, the method can be used for detecting and determining whether to respond to the access request through the generated network accessrule (i.e., white list) for determining that the network access can be performed, so that only the access request that satisfies the network access rule can be responded to avoid new vulnerabilities or missed reports caused by new network attack patterns and improve the security of network access.

Description

technical field [0001] The present application relates to the field of computer technology, and in particular to a method, device and equipment for generating security access control and network access rules. Background technique [0002] With the increasing popularity of Web applications, there are more and more network attacks on Web applications, such as XSS (Cross SiteScripting, cross-site scripting attacks), SQL (Structured Query Language, Structured Query Language) injection, etc. There are endless loopholes in the system and the basic applications it depends on. [0003] WAF (Web Application Firewall) is an important tool to defend against network attacks on Web applications. WAF is between the user and the background server of the application, and performs real-time security detection on network access requests to block various network attack requests. At present, WAF mainly defends based on rules, that is, security operators abstract characteristic data from known...

AI Technical Summary

Problems solved by technology

[0004] However, the existing rule generation methods mainly rely on the experience of security operators, and once a new network attack form appears, it is necessary to manually extract its features and add them to the above rules. However, if a loophole occurs, there is no If the above rules are updated in time, the WAF will not be able to detect the corresponding forms of network attacks, resulting in missed reports of network attacks. Moreover, the existing rules are built for attack characteristics, and loopholes will continue to appear, and unknown threats will emerge in endlessly. The rules are constantly being updated, but security issues have never been completely resolved

Images