A method and a system for coping with violent cracking behaviors by using big data analysis

Abstract

The invention discloses a method and a system for coping with violent cracking behaviors by using big data analysis. The method comprises the following steps that: a server acquires user behavior dataacquired by a mailbox system in real time; When an abnormal behavior is identified, the server marks an IP corresponding to the abnormal behavior as a blacklist IP, and sends the blacklist IP to themailbox system; The mailbox system carries out abnormity response processing on the blacklist IP, Wherein the abnormal response processing comprises prolonging the response time interval of the loginoperation on the blacklist IP, or disconnecting the connection of the blacklist IP and refusing the connection of the IP within the set time, or, for the authentication request of the blacklist IP, returning a password error regardless of whether the password is correct or not. According to the invention, the IP with abnormal behaviors can be automatically identified through big data analysis, andreasonable measures are automatically taken for coping to reduce the loss of clients, so that the safety problem caused by violent cracking behaviors is effectively solved, and the safety of the mailbox system is improved.

Description

technical field [0001] The invention relates to the technical field of computer security protection, in particular to a method and system for dealing with brute force cracking behaviors using big data analysis. Background technique [0002] In the field of mailbox system, there is often a security problem of mailbox being cracked by brute force, that is, hackers use software to continuously change passwords and try to log in to mailboxes until the login is successful. In the prior art, similar methods only consider the behavior of the attacking party's IP, but do not consider the characteristics of the attacked email account, and do not integrate the information of multiple clients. For example, different clients distributed all over the world are attacked by the same When an IP is attacked, it is impossible to identify the attacker and respond in time. In addition, the patent CN107800724A cloud host anti-cracking method, system and processing equipment has taken countermea...

AI Technical Summary

Problems solved by technology

[0004] Embodiments of the present invention provide a method and system for dealing with brute-force cracking behaviors using big data analysis to solve the technical problem of low efficiency in analyzing and responding to brute-force cracking behaviors in the prior art, which leads to low security of the mailbox system, thereby Improve the analysis and response methods of brute force cracking behavior, and improve the security of the mailbox system

Images