A security-based waf detection method and system

A detection method and a safe technology, applied in transmission systems, electrical components, etc., can solve problems such as normal response timeout, multi-response time, and impact on customer business, and achieve the effect of reducing the risk of timeout

Active Publication Date: 2021-07-02
HANGZHOU ANHENG INFORMATION TECH CO LTD
View PDF7 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0003] At present, WAF detects protection rules sequentially. Some protection rules may have relatively complex regular expressions, which cause the detection of these protection rules to take up a lot of response time, which may cause the normal response to time out, thus affecting The normal business of the customer is carried out

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A security-based waf detection method and system
  • A security-based waf detection method and system
  • A security-based waf detection method and system

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0029] According to an embodiment of the present invention, an embodiment of a security-based WAF detection method is provided. It should be noted that the steps shown in the flow chart of the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, Also, although a logical order is shown in the flowcharts, in some cases the steps shown or described may be performed in an order different from that shown or described herein.

[0030] figure 1 is a flowchart of a security-based WAF detection method according to an embodiment of the present invention, such as figure 1 As shown, the method includes the following steps:

[0031] Step S102, obtaining the average running time and risk coefficient of each protection rule in the target protection rule base, wherein the risk coefficient is a coefficient used to characterize the degree of danger of the vulnerabilities that each protection rule can protect.

[0032] Step S104, after obt...

Embodiment 2

[0074] The embodiment of the present invention also provides a security-based WAF detection system, the security-based WAF detection system is mainly used to implement a security-based WAF detection method provided in the above content of the embodiment of the present invention, the following describes the embodiment of the present invention The provided security-based WAF detection system is introduced in detail.

[0075] Figure 5 is a schematic diagram of a security-based WAF detection system according to an embodiment of the present invention, such as Figure 5 As shown, the security-based WAF detection system mainly includes: a first acquisition module 10, a second acquisition module 20, a retrieval module 30 and a detection module 40, wherein,

[0076] The first obtaining module 10 is used to obtain the average running time and risk coefficient of each protection rule in the target protection rule base, wherein the risk coefficient is a coefficient used to characterize ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The present invention provides a security-based WAF detection method and system, which relate to the technical field of WAF security rules and are applied to web application protection systems, including: acquiring the average running time and risk factor of each protection rule in the target protection rule library; After obtaining the web access request sent by the server, obtain the rule detection time of the web access request; use the dynamic programming algorithm, and determine the target rule set from the target protection rule base based on the average running time, risk factor and rule detection time; according to the target rule The assembly performs rule detection on the web access request to obtain a detection result; and determines whether the web access request is a normal access request based on the detection result. The present invention limits the total time of rule detection to not exceed the rule detection time under the condition of ensuring safety as much as possible, so as to reduce the overtime risk of customers handling normal business.

Description

technical field [0001] The invention relates to the technical field of WAF security rules, in particular to a security-based WAF detection method and system. Background technique [0002] With the rapid development of the Internet (web), web security threats are becoming more and more serious. Web Application Firewall (WAF) is a product designed to provide protection for web applications by implementing a series of security policies for HTTP / HTTPS. The web application firewall detects requests from clients to ensure their security. [0003] At present, WAF detects protection rules sequentially. Some protection rules may have relatively complex regular expressions, which cause the detection of these protection rules to take up a lot of response time, which may cause the normal response to time out, thus affecting The normal business conduct of customers. Contents of the invention [0004] In view of this, the object of the present invention is to provide a security-based...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & AuthorityPatents(China)
IPC IPC(8): H04L29/06
CPCH04L63/0263H04L63/1416H04L63/1433
Inventor陈代月范渊
OwnerHANGZHOU ANHENG INFORMATION TECH CO LTD