Website protection method, website protection device, website protection equipment and storage medium

Abstract

The invention discloses a website protection method, a website protection device, website protection equipment and a storage medium. The method comprises the following steps: responding to a receivedinformation query instruction by a log analysis platform, and extracting a query time parameter contained in the information query instruction; in preset indexes, looking for a target website access log corresponding to the query time parameter, and extracting access behavior data corresponding to an access user from the target website access log; and according to the access behavior data, detecting whether the access user has abnormal access behaviors, and if yes, performing access blocking on the access user according to a preset blocking strategy. The log analysis platform judges whether auser access is an abnormal access or not according to the access behavior data of the user, so that the situations that a normal access request is mistakenly reported as access rules or firewall strategies are made and an abnormal access request is fail to report are avoided, website protection flexibility and anti-intrusion capability are improved, and information security of a website as well asstructural safety are guaranteed.

Description

Technical field [0001] The present invention relates to the field of Internet technology, in particular to a website protection method, website protection device, website protection equipment and storage medium. Background technique [0002] At present, the existing website protection mostly adopts network layer firewall strategy and application layer protection, but this kind of protection method often produces many false positives and false negatives when protecting various websites. For example, the structure of a certain website may be very special. The access request sent by some terminal devices is falsely reported as an attack, but it is a normal request; or a certain website requires a certain special request to be intercepted, but if the rules and policies are customized for the request method, it will cause other websites The request was misreported. The flexibility and adaptability of existing website protection methods are far from enough to meet the needs of differen...

AI Technical Summary

Problems solved by technology

[0004] The main purpose of the present invention is to provide a website protection method, device, equipment and storage medium, aiming to solve the problem that the existing technology cannot accurately and efficiently protect the website Protection, the technical problem that normal access requests are easy to be falsely reported or killed by mistake

Images