WEB dynamic security defense method and system

Abstract

The invention discloses a WEB dynamic security defense method and system. The method is based on a moving target defense technical thought. The invention provides an active dynamic defense mechanism for a WEB service system. When the protected WEB application service system is not attacked, the service entry or the resource address is actively transformed, so that the information of the backgroundof the server is effectively hidden and protected, the dynamics and uncertainty of the attacked surface of the system are realized in a randomized dynamic coding technical mode, the difficulty of network attack implementation is improved, and the anti-attack capability of the WEB application service system is effectively enhanced.

Description

technical field [0001] The invention relates to the field of information security, in particular to a WEB dynamic security defense method and system. Background technique [0002] The importance of information security has risen to the level of national strategy. Although traditional information security equipment vendors and service providers provide many solutions, national laws and regulations and related standards also stipulate strict security management systems, but information security problems still cannot be eliminated. For example, incidents of anti-tampering of webpages, incidents of hanging horses on websites, and incidents of website data encryption and extortion occur from time to time and cause economic losses and adverse social impacts. [0003] Analyzing the current situation of network security, the reason for the "easy to attack but difficult to defend" situation in the field of information security is mainly due to the "short board" in the traditional WE...

AI Technical Summary

Problems solved by technology

[0004] At present, WEB application security is often protected by application firewalls or intrusion prevention devices. These devices use traditional rule-based defense methods, which cannot achieve complete defense against vulnerabilities. On the one hand, there is a lack of effective defense methods for unknown defects and threats. The situation is completely passive, unable to actively defend against emerging vulnerabilities and threats. If the relevant patches are not timely, it will easily cause the risk of "zero-day attack"

On the other hand, when the security rules of the traditional application firewall (WAF) are fully enabled, the performance drops seriously, and even crashes occur. In reality, the related vulnerabilities of the application system will continue to be exposed and accumulated over time. It is inevitable that the rule base of traditional defense products will continue to increase and expand. Considering the performance and feasibility factors, the maintenance of the application system will fall into a dilemma between security and operation.

Images