Processing method, device for network request, electronic device and storage medium

Abstract

The embodiment of the invention provides a processing method, a device for network requests, an electronic device and a storage medium. The method comprises the following steps: obtaining IP attributeinformation corresponding to network requests; scoring the network requests for the first time according to a preset first scoring rule and the IP attribute information; determining whether the firstscoring score is lower than a preset first scoring threshold; if yes, blocking the network requests; if no, obtaining IP behavior information corresponding to the network requests; scoring the network requests for the second time according to a preset second scoring rule and the IP behavior information; determining whether the second scoring score is lower than a preset second score threshold; ifyes, sending an alert to the network requests. The embodiment of the invention blocks or alerts the network requests according to the IP attribute information and the IP behavior information corresponding to the network requests, thereby improving the blocking or alarming effect on the abnormal login / registration behavior of the network platform.

Description

technical field [0001] The invention relates to the technical field of Internet security, in particular to a network request processing method, device, electronic equipment and storage medium. Background technique [0002] With the development of Internet technology, in order to enable users to better experience network products and services and better manage various information of users, some network platforms generally set up functions that allow users to register or log in. For example, many online shopping platforms In order to facilitate online shopping for users, the function of registering or logging in is enabled for users, which not only facilitates users to manage their shopping information, but also enables the online shopping platform to provide better services for users. However, the user login or registration information of the network platform is also vulnerable to attacks by network hackers. On the one hand, network hackers steal information such as user logi...

AI Technical Summary

Problems solved by technology

In short, the existing solutions can be divided into two categories: one type of security policy is relatively simple, so the defense effect is not good, and it is easy to bypass abnormal login / registration behavior; The front and back ends of the platform set complex logic to collect a large amount of data, and sometimes this logic adjustment becomes a burden on the main business (login / registration behavior, etc.)

Moreover, in the above-mentioned solutions, on the one hand, a large amount of manual burying work needs to be carried out according to the actual needs of the network platform, which is not only a heavy workload but also prone to errors. The false positive rate or false negative rate of behaviors increases; on the other hand, manual tracking can only collect operation information after the tracking time, and cannot count the operation information before the tracking time, so it is easy to detect some abnormal login / registration behaviors. False report

[0004] In short, the existing manual burying technology is used to block or alarm the abnormal login / registration behavior of the network platform, which is prone to false negatives or false positives.

Images