Method and device for preventing malicious attacks

Abstract

The embodiment of the invention provides a method and device for preventing malicious attacks and relates to financial technology field, the method comprises the following steps of receiving a first request message sent by a user side, and when the first request message is matched with the identification rule in the identification rule set, determining the first request message as a suspicious message, and determining a target prevention strategy from the prevention strategies corresponding to the matched identification rule, the prevention strategy corresponding to the identification rule being updated according to the historical matching times of the identification rule; and processing the first request message by adopting a target prevention strategy, and sending a processing result to the user side. Due to the fact that the prevention strategy corresponding to each identification rule is not single and can be updated according to the number of historical matching times, when a malicious user attacks, it is difficult to bypass the prevention strategy through multiple attempts, and therefore safety is improved. In addition, when a malicious user finds that the prevention strategy is random, the number of times of malicious attempts can be reduced, thereby reducing the network load.

Description

technical field [0001] The embodiments of the present invention relate to the technical field of financial technology, and in particular to a method and device for preventing malicious attacks. Background technique [0002] With the development of computer technology, more and more technologies are applied in the financial field, and the traditional financial industry is gradually transforming into Fintech. However, due to the security and real-time requirements of the financial industry, higher requirements are placed on technology. requirements. At present, the malicious attacks on the financial system are mainly attacked in a point-to-point way, that is, the judgment rules and corresponding prevention strategies are set in advance, and when the user's behavior data hits the judgment rules, the corresponding prevention strategies are used for processing. Since the determination rule in this method corresponds to a single prevention strategy, it is easy for a malicious use...

AI Technical Summary

Problems solved by technology

[0003] Since the current judgment rule corresponds to a single prevention strategy, when a malicious user tries many times, it is easy to crack the prevention strategy, thereby bypassing the prevention strategy and further affecting the security of the system. Embodiments of the present invention provide a method for preventing malicious attacks Method and device

Images