Web intelligent defense method, device and equipment, and readable storage medium

Abstract

The invention discloses a web intelligent defense method, which comprises the steps of: determining whether features of a request are recorded in a data sheet in which attack information is recorded when receiving the request sent by a client; if so, determining whether a number of attacks of the request within preset first duration exceeds a preset threshold; and executing a preset defense rule when the number of attacks of the request within the preset first duration exceeds the preset threshold. The web intelligent defense method avoids the process of comparing each request with an attack feature library repeatedly, thereby reducing workload, improving the defense efficiency, and correspondingly improving the normal service quality in the network and the performance of the entire network. Correspondingly, a web intelligent defense device, web intelligent defense equipment and a readable storage medium disclosed by the invention further have the above technical effects.

Description

technical field [0001] The present invention relates to the technical field of network security, and more specifically, relates to a web intelligent defense method, device, equipment and readable storage medium. Background technique [0002] Today network security has become an important issue affecting network performance. Attackers generally target the enterprise network, invade the enterprise's host through the network, steal or destroy important data, paralyze the enterprise network, and cause huge losses to the enterprise. [0003] In order to improve the security of the network, people usually filter the access requests with attack behavior through the defense system. Among them, the attack detection of the defense system is mainly realized through the attack signature database. The defense process of the existing defense system is: at the security engine, each request received is compared with the preset attack signature library to determine whether the request has ...

AI Technical Summary

Problems solved by technology

It should be noted that the existing defense system needs to compare each received request with the attack signature database, which undoubtedly increases the load and workload of the security engine, generates a lot of redundant work, and reduces the defense capability. Efficiency, normal quality of service in the network and overall network performance

Images