A web intelligent defense method, device, equipment and readable storage medium

Abstract

The invention discloses a web intelligent defense method, which includes: when receiving a request sent by a client, judging whether the request feature is recorded in a data table recording attack information; if so, judging that the request is within a preset first duration Whether the number of attacks within the preset first duration exceeds the preset threshold; when the number of attacks within the preset first duration of the request exceeds the preset threshold, the preset defense rule is executed. Among them, this method avoids the process of repeatedly comparing each request with the attack signature database, thereby reducing the workload, improving the defense efficiency, and correspondingly improving the normal service quality in the network and the performance of the entire network. Correspondingly, a web intelligent defense device, equipment, and readable storage medium disclosed in the present invention also have the above-mentioned technical effects.

Description

technical field [0001] The present invention relates to the technical field of network security, and more specifically, relates to a web intelligent defense method, device, equipment and readable storage medium. Background technique [0002] Today network security has become an important issue affecting network performance. Attackers generally target the enterprise network, invade the enterprise's host through the network, steal or destroy important data, paralyze the enterprise network, and cause huge losses to the enterprise. [0003] In order to improve the security of the network, people usually filter the access requests with attack behavior through the defense system. Among them, the attack detection of the defense system is mainly realized through the attack signature database. The defense process of the existing defense system is: at the security engine, each request received is compared with the preset attack signature library to determine whether the request has ...

AI Technical Summary

Problems solved by technology

It should be noted that the existing defense system needs to compare each received request with the attack signature database, which undoubtedly increases the load and workload of the security engine, generates a lot of redundant work, and reduces the defense capability. Efficiency, normal quality of service in the network and overall network performance

Images